I had assumed the plan was, when the bloom filter does reject a certificate, go and check if it is actually valid or not. I imagine 99.9% of the time (totally

I had assumed the plan was, when the bloom filter does reject a certificate, go and check if it is actually valid or not. I imagine 99.9% of the time (totally made up), certificates will be valid, and the bloom filter will agree they are valid. In the 0.1% of the time the bloom filter rejects, go and actually check.