Generate new private key for SSL termination at torproject.org
This #heartbleed thing happened and it is prudent to roll certs on torproject.org, which may involve updating version pins in various third party browsers that implement same.
Trac:
Username: anon
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information