Certain security aspects have to be observed even when dealing with certificates:
- Only ever transfer private keys via secure connections, e.g. with HTTPS.
- Only use passphrases that are long enough and secure as passwords to be used as keys or PKCS#12 files.