How hard is it for Yahoo to change their certificate?