also noticing that the CA private key == 4 vuln and the PHP vuln are not related to each other at all. the PHP vuln dropped second, at a time when infosec workers were already scrambling to fix something else.