4 ms·

As much as I'm a fan of Perfect Forward Secrecy, it does not protect you against MITM with old certificates.