Ask HN: How and when do I use knock-out certificates? | Hacker News Reader