Re:Microsoft silently adds Amazon root certificates to its CTL
by goes_to_11 on Friday January 22, 2016 @05:09AM
(#10951856)
You can pin (multiple) private keys. Usually, you don't have to change your private key when getting a new certificate (for example, with Lets Encrypt).
If you do want to change private keys regularly, generate them beforehand and pin them.
If you do want to change private keys regularly, generate them beforehand and pin them.