to be fair they would have had to generate certs to push the serial # up to the collided cert anyways, so they could use those generated certs and observed netw

to be fair they would have had to generate certs to push the serial # up to the collided cert anyways, so they could use those generated certs and observed network latency to know exactly the uptime.. still very impressively executed..