Covert wiretap on Russian messaging service blown by expired TLS certificate

Previous discussion:

https://news.ycombinator.com/item?id=37955264