# Deny access to certificates directory
Options -Indexes
AllowOverride None

<Files "*">
    Order allow,deny
    Deny from all
</Files>

# Allow access only from PHP scripts
<Files "*.pem">
    Order allow,deny
    Deny from all
</Files>
