Vigilance wrote:so in a hypothetical world where you nuke the old cert i can just do this and not curse your name.
I would like to stress that it's not a hypothetical world, it really does need to be done. The OS that the Legacy server runs is already so old that the update repositories are 404. If anything, I've been drawing it out much too far already, and if I were you, I'd update the certificate now and only log in during the new-certificate times instead. I'll probably lengthen the new-cert durations as time goes on (2h new/1h old, and on on).