The first thing that came to my mind was "cert pinning and someone lost the private keys", but that seems pretty unlikely in the grand scheme of things that can

The first thing that came to my mind was "cert pinning and someone lost the private keys", but that seems pretty unlikely in the grand scheme of things that can go wrong. I'd actually be willing to pick one of these up for a 70%+ discount if it came with all the internal schematics and source code, server migrations be damned.