How we mitigated a vulnerability in Cloudflare’s ACME validation logic