certificate files use .txt, as .px4 was a poor choice of extension as its already used elsewhere.
WIP for OTP integration - looks OK, but not working yet.