> A certificate that is published in CT logs isn't necessarily legitimate, but at least it's public so domain owners can detect it and raise the alarm if the ce

> A certificate that is published in CT logs isn't necessarily legitimate, but at least it's public so domain owners can detect it and raise the alarm if the certificate is illegitimate. Oh yeah. I can't believe I didn't put that together. Thanks for spelling it out :-)