You mentioned a case where certificate pinning broke production traffic. What actually caused that?

A production outage was caused by pinning a leaf certificate instead of a public key in certificate pinning. When the leaf certificate expired quietly, all requests failed hard with no warning. The fix was switching to public key pinning, which has a longer lifespan and is less fragile. The lesson: never pin leaf certificates in production.