You can also pin the public keys of certificate authorities to limit which ones can issue for your domain and not have to worry about key backups. GitHub do thi

You can also pin the public keys of certificate authorities to limit which ones can issue for your domain and not have to worry about key backups. GitHub do this as you can see here: https://report-uri.io/home/pkp_analyse/https%3A%2F%2Fgithub.com https://report-uri.io/home/pkp_analyse/https%3A%2F%2Fgithub.... I also have a blog on the various places you can pin like the leaf, intermediate and root: https://scotthel.me/k2h https://scotthel.me/k2h