> On 29 Nov 2016, at 11:14, Terje Elde <terje at elde.net> wrote: > > But you have ruled out certs from all other CAs. Sorry, typo. That should read: But you have ruled out certs from all other CAs, with keys that you did not pin.