[singlow]

But what if the key was never used with openssl or heartbeat?

[andreasvc]

Obviously that would be great, but a tool cannot check that.