CVE-2026-77205: confirm bad cert flushed so good cert works
