Rumor has it nobody inside of Twitter has access to the internal root CA private keys so they can't provision a new one, and it expired so they can't run puppet. Not the end of the world, but also this is going to kill productivity while everyone has to wipe their laptop.