Anyways, good thing that any one of 2000+ organizations having a oops-all-four type fuckup you can just sign fake certs for every domain that exists for a bit. Definitely no problems here at all.