Comment by jgrahamc

So, these guys bought a COMODO wildcard certificate and then stuck it (public and PRIVATE parts) on Github for anyone to download.

Wonder how long before COMODO revokes this cert?

If you have a test domain you can stick it on CloudFlare and get a certificate for free without the private part becoming public.