[fix] `.pem` is a private key