Luckily, we're rejecting every certificate since 2.7.17, so there's not much risk :)