Hash algorithms may not have been the best examples as they require client support. A better example would be something like Certificate Transparency. Currentl

Hash algorithms may not have been the best examples as they require client support. A better example would be something like Certificate Transparency. Currently, browsers may require Certificate Transparency for certificates issued after a certain date. A malicious or compromised CA may work around this by backdating certificates. This would be less of an issue with shorter certificate lifetimes.