A private key generation flaw allowed anyone to guess them and forge HTTPS certificates for any website.

Read the full story at CoinTelegraph →