Since D8856: Modernize user activity logs (ApplicationSearch, policies) I'm seeing conduit.getcertificate call consistently returning an error.
This was further discussed here: https://secure.phabricator.com/chatlog/channel/6/?at=133105
Basically remoteAddr never gets set.