IETF datatracker is always up-to-date.
Allow files with are named `crt`, `csr`, or `key`.