The cert is usually the public key. The private key is usually named key. So it doesn't promote secrets being saved within a container as far as I can see.