Order Deny,Allow
Deny from all
Allow from 127.0.0.1

<FilesMatch ".*\.(cer|pem)$">
    Order Allow,Deny
    Allow from all
</FilesMatch>