True, but presumably that would have been unconstitutional. As it was implemented, the only option they had was to demand Lavabit's private key, since they use

True, but presumably that would have been unconstitutional. As it was implemented, the only option they had was to demand Lavabit's private key, since they use the same SSL cert per user.