If proper revoking procedures are being followed, no. You can start reading more info here: https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_T

If proper revoking procedures are being followed, no. You can start reading more info here: https://developer.mozilla.org/en-US/docs/Web/Security/Certificate_Transparency https://developer.mozilla.org/en-US/docs/Web/Security/Certif... (HPKP is considered obsolete, if by cert pinning you meant that. If you're confusing HSTS with HPKP, just know that HSTS makes it much harder to mistakenly access the site via http, while HPKP [now deprecated] is the practice of ensuring some hashes is found in the cert that the server sends to mitigate some attacks)