How should Sectigo have detected the badness?