SSL.com was mis-issuing SSL certificates by wrongly interpreting email addresses submitted for verification, allowing ...

The team was able to create a rogue certificate authority and use it to issue valid SSL certificates for any ... They collected 30K certs from Firefox trusted CAs. 9K of them were MD5 signed.