Sure there was - rebrand and change names, maybe once or twice until the public loses interest to keep talking about it.

Or silently spin out a subsidiary under a new name who takes over the cert business, and redirect existing customers there for renewals.

They also have to convince the root programs to let them stay trusted, which can't be done by issuing vague press releases until the news cycle moves on.

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c30 They're being asked some very pointed questions about why they encountered problems with the key generation process at the time but didn't properly investigate.

Also, deflect blame while attacking those who brought up your mistakes.

Don't these people pay any attention to politics?