[mr_mitm]

Depends on how many certificates become invalid now.

[Uberphallus]

Yeah, if half-smart, certificates should expire relatively frequently to contain damage in such a scenario.