diff --git a/.config/CredScanSuppressions.json b/.config/CredScanSuppressions.json
index 2f6299934d..4c68f893d7 100644
--- a/.config/CredScanSuppressions.json
+++ b/.config/CredScanSuppressions.json
@@ -20,6 +20,10 @@
     {
       "placeholder": "1qaz@WSX",
       "_justification": "This is a fake password used in test code."
+    },
+    {
+      "file": "\\src\\Servers\\Kestrel\\shared\\test\\TestCertificates\\testCert.pfx",
+      "_justification": "Legitimate UT certificate file with private key"
     }
   ]
 }