The file named startup-config is the current startup configuration file, in physical NVRAM or in Flash memory. If the file is located in a Flash memory file system, this entry is a symbolic link to the actual file. The file named underlying-config is always the NVRAM version of the configuration.
The private config contains data that can never be displayed.
Presumably, these are keys and certificates used by crypto image.
