"which provides Internet access to millions ... don't have internet access?"
I really hope so. I hope they are reachable for management only from an internal management network separated from the Internet traffic they carry. I really do no expect any management access being connected directly to the Internet.
These devices are used by the very companies that build the core network infrastructure, they should not need "the internet" or any other network to be reached by the control rooms...
Still, if the certificate was used for the management network access....
Biting the hand that feeds IT
