We should be checking and displaying a message. In the Auth screen it checks the pins and then displays an error if you aren't pinned. I suppose it IS possible to be pinned but still have a SSO cert which would cause a weird situation. I just started the self signed cert message ticket and I'll take this one too and investigate.