So for those of us who don't understand these things you are doing to remove the old certificates--are we just screwed?