Comment by tybit

4 is fine, but only if you’re a certificate authority.