It's a damn shame that X.509v3 doesn't support multiple signatures on a single certificate. That would really ease the transition to new signing algorithms. I

It's a damn shame that X.509v3 doesn't support multiple signatures on a single certificate. That would really ease the transition to new signing algorithms. I can't really fault the CAs or browser developers here because X.509 doesn't facilitate forwards compatibility.