Estonia is very digital society with around 5000 public and private online services from online banking to telecom services. Only marriages, divorces and real-estate transactions are not available online. For such a digital society September 2017 began with horrific news – 2/3 of all the valid and very actively used ID cards that also have eID functionality where affected by ROCA vulnerability. Immediate suspending or revoking of the vulnerability- affected cards would have been the end of the Estonian digital society. Physically replacing the 2/3 of all the valid ID cards was impossible as there was no infrastructure for immediately replacing documents that had been issued over three years.