PHP, TLS... I swear, if if I see one [.]./ tonight... I need to be grading my web security midterms.

(Incidentally, one of the questions was literally what to do if your intermediate CA's signing cert gets compromised.)