If I understand this correctly, it only affects certificates issued by public CAs (certificates for public websites, for example). So for certs issued by a company CA (e.g. for internal infrastructure), it should not apply. Can anyone confirm?

When I was working with COBOL and a 30yrs old codebase, I was always scared of majorly fucking up, even when only doing small changes.

Really glad that I am not involved in that project…

Yes sure! Unfortunately most companies which I work for (insurance and banks mostly) still use windows quite often…

From an enterprise IT stance I’d disagree. For phython you need an interpreter, while powershell is available on every random windows 20xx server. It is far easier to do this task in PS than requesting the python interpreter to be installed on the machine and then doing it in python.