{"id":139518,"date":"2025-09-04T22:29:34","date_gmt":"2025-09-04T22:29:34","guid":{"rendered":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/"},"modified":"2025-09-04T22:29:34","modified_gmt":"2025-09-04T22:29:34","slug":"the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest","status":"publish","type":"post","link":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/","title":{"rendered":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest."},"content":{"rendered":"<div>\n<p>Wednesday\u2019s discovery of <a href=\"https:\/\/arstechnica.com\/security\/2025\/09\/mis-issued-certificates-for-1-1-1-1-dns-service-pose-a-threat-to-the-internet\/\">three mis-issued TLS certificates<\/a> for Cloudflare\u2019s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users\u2019 DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have read queries or even tampered with results to send 1.1.1.1 users to malicious sites.<\/p>\n<p>Since then, new information and analysis have become available, including the issuance of nine additional certificates since February 2024. This FAQ list is designed to answer questions raised in comments to the story and to provide the latest on what\u2019s known about the incident, which Cloudflare <a href=\"https:\/\/blog.cloudflare.com\/unauthorized-issuance-of-certificates-for-1-1-1-1\/\">said Thursday<\/a> constituted an \u201cunacceptable lapse in security by Fina CA,&#8221; the Microsoft-trusted certificate authority (CA) responsible for all 12 of the mis-issued certificates.<\/p>\n<h2>You asked; we answer<\/h2>\n<p><b>Has new information come to light since Wednesday morning?<\/b><\/p>\n<p><a href=\"https:\/\/arstechnica.com\/information-technology\/2025\/09\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/\">Read full article<\/a><\/p>\n<p><a href=\"https:\/\/arstechnica.com\/information-technology\/2025\/09\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/#comments\">Comments<\/a><\/p>\n<\/div>\n<p class=\"wpematico_credit\"><small>Powered by <a href=\"http:\/\/www.wpematico.com\" target=\"_blank\">WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wednesday\u2019s discovery of three mis-issued TLS certificates for Cloudflare\u2019s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users\u2019 DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[241],"tags":[],"class_list":["post-139518","post","type-post","status-publish","format-standard","hentry","category-technology"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com\" \/>\n<meta property=\"og:description\" content=\"Wednesday\u2019s discovery of three mis-issued TLS certificates for Cloudflare\u2019s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users\u2019 DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/\" \/>\n<meta property=\"og:site_name\" content=\"UshopWell.com\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-04T22:29:34+00:00\" \/>\n<meta name=\"author\" content=\"UShopWell\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"UShopWell\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/\"},\"author\":{\"name\":\"UShopWell\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#\\\/schema\\\/person\\\/6fd1f9e0ff932e534c86c70d5acff0fc\"},\"headline\":\"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest.\",\"datePublished\":\"2025-09-04T22:29:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/\"},\"wordCount\":183,\"publisher\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#organization\"},\"articleSection\":[\"Technology\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/\",\"url\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/\",\"name\":\"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#website\"},\"datePublished\":\"2025-09-04T22:29:34+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#website\",\"url\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/\",\"name\":\"UshopWell.com\",\"description\":\"The Premiere Online Marketplace\",\"publisher\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#organization\",\"name\":\"UshopWell\",\"url\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/pandaSwea.png\",\"contentUrl\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/wp-content\\\/uploads\\\/2018\\\/01\\\/pandaSwea.png\",\"width\":365,\"height\":359,\"caption\":\"UshopWell\"},\"image\":{\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/#\\\/schema\\\/person\\\/6fd1f9e0ff932e534c86c70d5acff0fc\",\"name\":\"UShopWell\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g\",\"caption\":\"UShopWell\"},\"url\":\"https:\\\/\\\/ushopwell.com\\\/ublog\\\/author\\\/kburnettu\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/","og_locale":"en_US","og_type":"article","og_title":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com","og_description":"Wednesday\u2019s discovery of three mis-issued TLS certificates for Cloudflare\u2019s 1.1.1.1 encrypted DNS lookup service generated intense interest and concern among Internet security practitioners. The revelation raised the possibility that an unknown entity had obtained the cryptographic equivalent of a skeleton key that could be used to surreptitiously decrypt millions of users\u2019 DNS queries that were encrypted through DNS over TLS or DNS over HTTPS. From there, the scammers could have...","og_url":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/","og_site_name":"UshopWell.com","article_published_time":"2025-09-04T22:29:34+00:00","author":"UShopWell","twitter_card":"summary_large_image","twitter_misc":{"Written by":"UShopWell","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/#article","isPartOf":{"@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/"},"author":{"name":"UShopWell","@id":"https:\/\/ushopwell.com\/ublog\/#\/schema\/person\/6fd1f9e0ff932e534c86c70d5acff0fc"},"headline":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest.","datePublished":"2025-09-04T22:29:34+00:00","mainEntityOfPage":{"@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/"},"wordCount":183,"publisher":{"@id":"https:\/\/ushopwell.com\/ublog\/#organization"},"articleSection":["Technology"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/","url":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/","name":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest. - UshopWell.com","isPartOf":{"@id":"https:\/\/ushopwell.com\/ublog\/#website"},"datePublished":"2025-09-04T22:29:34+00:00","breadcrumb":{"@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ushopwell.com\/ublog\/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ushopwell.com\/ublog\/"},{"@type":"ListItem","position":2,"name":"The number of mis-issued 1.1.1.1 certificates grows. Here\u2019s the latest."}]},{"@type":"WebSite","@id":"https:\/\/ushopwell.com\/ublog\/#website","url":"https:\/\/ushopwell.com\/ublog\/","name":"UshopWell.com","description":"The Premiere Online Marketplace","publisher":{"@id":"https:\/\/ushopwell.com\/ublog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ushopwell.com\/ublog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ushopwell.com\/ublog\/#organization","name":"UshopWell","url":"https:\/\/ushopwell.com\/ublog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ushopwell.com\/ublog\/#\/schema\/logo\/image\/","url":"https:\/\/ushopwell.com\/ublog\/wp-content\/uploads\/2018\/01\/pandaSwea.png","contentUrl":"https:\/\/ushopwell.com\/ublog\/wp-content\/uploads\/2018\/01\/pandaSwea.png","width":365,"height":359,"caption":"UshopWell"},"image":{"@id":"https:\/\/ushopwell.com\/ublog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/ushopwell.com\/ublog\/#\/schema\/person\/6fd1f9e0ff932e534c86c70d5acff0fc","name":"UShopWell","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4adb372cadd43b4d4c57964dab95b0f69618bf960d131c4acf49d96d6bbc9c6e?s=96&d=mm&r=g","caption":"UShopWell"},"url":"https:\/\/ushopwell.com\/ublog\/author\/kburnettu\/"}]}},"_links":{"self":[{"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/posts\/139518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/comments?post=139518"}],"version-history":[{"count":0,"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/posts\/139518\/revisions"}],"wp:attachment":[{"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/media?parent=139518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/categories?post=139518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ushopwell.com\/ublog\/wp-json\/wp\/v2\/tags?post=139518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}