A private key generation flaw allowed anyone to guess them and forge HTTPS certificates for any website.
To respect copyright, we link to the source rather than republishing the full text. Read the complete article on Cointelegraph.