Turns out there's no certificate or keys leaked, but there was an exposed unsecured web service to generate GP from Poland. It has since been fixed, but apparen

Turns out there's no certificate or keys leaked, but there was an exposed unsecured web service to generate GP from Poland. It has since been fixed, but apparently there's a couple more still around (Vietnam and such it seems).