Botched server move left the door open, and DigiCert took months to notice someone had wandered in