This is a very newbie question.
SSL Pinning is "safe" in assumption that only the real server can decrypt the public key. By design, it should be almost impossible to find the private key from the public key. However, is it relatively easy to create a new certificate (private key) that generates the "same" public key which the SSL Pinning trusts?
In order words, how hard is to create a new private key that generates the public key "I want".
For example, if I want to create a new certificate which the public key is: sha256/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa=
Can I easily do that?