@april@macaw.social And they did it in TLS as well: openssl s_client -connect signed.bad.horse:443 -servername signed.bad.horse