@49016 How in the hell do you do this, though??

Why were they dealing with raw private keys anyway, why were they putting them through random weird scripts and then re-importing them into (what seems like) another/their own HSM?

They must've internally known that they fucked up biiiig time when that happened and then didn't report it. No way _THIS_ didn't get catched?!

Is this a government job trying to get TLS root private keys maybe? Either that or a paid off employee.