PKI Insights – Avoiding PenTest Pitfalls