# ── PEM files (recommended for Let's Encrypt / certbot) ──
CERT_FILE=fullchain6.pem
PRIVKEY_FILE=privkey.pem
# Leave empty if the private key has no passphrase
PRIVKEY_PASSWORD=

# ── Alternative: PKCS#12 ──
# PKCS12_FILE=certificate.p12
# PKCS12_PASSWORD=changeit

# ── Signature metadata ──
SIGNATURE_NAME=John Doe
SIGNATURE_REASON=Approved
SIGNATURE_LOCATION=Berlin, Germany
SIGNATURE_CONTACT=john@example.com