Even then it still relies on knowledge that the certificate has been compromised.