Yep, totally fair. It's kind of crazy actually how we all trust that stuff, and when there's a breach people just want to expire certificates more often etc.

I bet there is a better way but as long as no one is paying, we're stuck with this mess. I have programmed stuff with x509 in the medical sector, what a trusty spaghetti mess that was, but when you finally got your cert, you could basically do whatever.

Sorry for the rant 😅 I just want to show people that even if the mathematics behind RSA is fantastic and secure, the human side is always there to break that 🤷🏼‍♀️.