ca-sign.gup:
  **/*-cert.pub