/s   whitespace
   .*?  any character (.), unlimited length (*), as few as possible (?)
   (?:  non-capturing group
   KEY  literal
   |    OR
   CERT literal
   )    end group