Certs compromise is a good question for office hours, but on php I think there's no exposure