If the doofuses issued a certificate with a private key of 4, my first inclination is to assume that there are others with private keys of 0, 1, 2, and 3 out there waiting to be found. (If you don’t know what I’m on about, don’t worry about it, the internet security wonks are on the case.)