@jaseg Assuming the keys might have been generated on a HSM: Is it know which vendor one should extra avoid as a result?