It's also worth mentioning that compromised certificates can be explicitly revoked. https://serverfault.com/questions/264515/how-to-revoke-an-ssh-certificate-n

It's also worth mentioning that compromised certificates can be explicitly revoked. https://serverfault.com/questions/264515/how-to-revoke-an-ssh-certificate-not-ssh-identity-file https://serverfault.com/questions/264515/how-to-revoke-an-ss...