Certificate vulnerability, FTP and SFTP