# prevent access to cert files via webserver
RewriteRule .+ - [F]