This is awesome, thanks! Also, fwiw, the post didn't have the (2000) tag when I encountered the expired cert. Crypto isn't my strong suit, so my BS filter use

This is awesome, thanks! Also, fwiw, the post didn't have the (2000) tag when I encountered the expired cert. Crypto isn't my strong suit, so my BS filter uses heuristic shortcuts. These shortcuts are often wrong.