use .pubkey extension for rsa public key