kmq

If my understandig of this issue is correct, ChatSecure Pins to the *key* of the certificate, so you can re-new the LE certificate if you do not change they key...

There is at least one other issue dealing with this, that indicates that something in that area is buggy. See #1006

88% on https://compliance.conversations.im/server/omfa.de/ Missing mod_omemo_all_access, but other clients on the same server also running chatsecure do not have this issue.

Is it possible that this is a bug instead of the deliberate key-deactivation ? The keys don't seem to be deactivated in line with the 30 day expiry. Looking at...