[angry_octet]

You wouldn't be in a very good position to revoke them then, would you? For example, if we had another heartbleed.

[iancarroll]

I have access to manage them, however the private keys are either in various services or non exportable with AWS...