[ivraatiems]

> There is no way to induce a vulnerability by using an incompetent or malicious CA, provided you generate your own, strong private key.

If OVH is doing this automatically, they're the ones generating the keys, right?

[Faaak]

They already have the keys either way: its a shared-hosting environment.