From the Mozilla page: >Note: The current specification requires including a second pin for a backup key which isn't yet used in production. This allows for ch

From the Mozilla page: >Note: The current specification requires including a second pin for a backup key which isn't yet used in production. This allows for changing the server's public key without breaking accessibility for clients that have already noted the pins. This is important for example when the former key gets compromised.