@Digital_Archivist Yeah, another part of my organisation found out the hard way what "deprecated" meant in terms of authenticating logins to their business-critical app. Whoops. So an alternative cert-based mechanism needed asap. They needed assistance in CSR and domain ownership proof, that kind of thing.
I don't mind too much as he's a really nice bloke.