search for: key_load_cert

...dsaA and ~/.ssh/id_ecdsaB, and similarly for ~/.ssh/id_ecdsa.pub, and placing the A and B certificates at ~/.ssh/id_ecdsaA-cert.pub and ~/.ssh/id_ecdsaB-cert.pub respectively, thereby creating two copies of the key, each with its own certificate? Looking at the source code, it looks as though not: key_load_cert (authfile.c) calls key_try_load_public (authfile.c), which parses ${keyfile}-cert.pub until a key is found, loads it, and returns, thus ignoring any subsequent certificates in the file. The cert filename is also hardcoded to be ${keyfile}-cert.pub in key_load_cert. Best wishes, Ryan -- |_)|_/ Ry...