Hacker News Reader

I'm more thinking the new host key prevented SSL cert rotation from happening properly

Maybe, but only if they're refreshing certificates less than a day before expiry. Which isn't ideal.