[FoRK] X.509 certificate collision via MD5 collisions (fwd from jeff@k2.com)