bjosv wrote: Great, I'll have a go at it to move it into a separate check. I used `cert-err33-c` as a blueprint and maybe that check can be updated later as well if we find a good model. https://github.com/llvm/llvm-project/pull/73119