{
  security.pki.certificateFiles = [
    # Step CA Root
    ../extra/ca.crt
  ];
}