diff --git a/src/encryptid/server.ts b/src/encryptid/server.ts
index d9ef69b8..54d9af0b 100644
--- a/src/encryptid/server.ts
+++ b/src/encryptid/server.ts
@@ -6658,6 +6658,7 @@ async function initOidcKeys() {
     const pemBody = pemEnv
       .replace(/-----BEGIN PRIVATE KEY-----/, '')
       .replace(/-----END PRIVATE KEY-----/, '')
+      .replace(/\\n/g, '')   // literal \n from .env files
       .replace(/\s/g, '');
     const binaryDer = Uint8Array.from(atob(pemBody), c => c.charCodeAt(0));
     oidcPrivateKey = await crypto.subtle.importKey(