Treat an SSL private key like a high-value credential.
- Do not paste it into public tickets, chat rooms, repositories, or website pages.
- Store backups in a secure location with restricted access.
- Do not reuse a compromised private key when replacing a certificate after suspected exposure.
- Delete unneeded exported copies after confirming the required secure backup exists.
A public certificate can be shared; its matching private key must remain private.
