@foone apparently Tom7's LetsEncrypt cert got revoked because they factored his intentionally shitty RSA key. I kind of assumed this was already being done.