Its one thing to certify a doctor and another to certify software.

There are formal proofs for software. FIPS doesnt work with software, it takes 6 months just to pass the process??

What does FIPS mean if after the 6th month another heartbleed is found? FIPS remains but the product is useless.