diff --git a/pki/.gitignore b/pki/.gitignore
new file mode 100644
index 0000000..e58b508
--- /dev/null
+++ b/pki/.gitignore
@@ -0,0 +1,4 @@
+openssl.cfg
+intermediate_ca
+root_ca
+
diff --git a/pki/README.md b/pki/README.md
new file mode 100644
index 0000000..2abc67e
--- /dev/null
+++ b/pki/README.md
@@ -0,0 +1,5 @@
+# pki
+
+This folder contains files uses to manage the certificate authority (CA), so
+handle with care.
+