[ primary ]
private = file://testdata/server.key
certificate = testdata/server.crt

[ backup ]
private = ksm://test-signer
certificate = testdata/server.crt
