[Kaali]

I would think that they have statically linked it, which is why I thought about using a debugger to catch the data. With dynamically linked library, such as OpenSSL, it would be quite easy to capture the data.

[tirant]

You could just search for the certificates in the code, and update them with your own.

[fnordfnordfnord]

But haven't they been rushing updates out the door? They may have been careless given the situation.