As an outsider my guess is that by having a signer and counter-signer you are accepting that the chance of both certs being compromised is minimal enough. Of c

As an outsider my guess is that by having a signer and counter-signer you are accepting that the chance of both certs being compromised is minimal enough. Of course this sorta falls apart if you consider large bad actors could have legit timestamp certs over a period of time and then use those historic certs on backdated servers to counter-sign a stolen signing cert. It would appear as a legit signed and counter-signed cert done when the signing certs were valid.