Which is good because certificates not in CT logs are treated as invalid/untrusted.