And just to clarify.. you’d need the pinned certificate key/fingerprint - it’s expiry is not enough to detect a change.