Improper certificates threatened internet security

Three improperly issued TLS certificates for the 1.1.1.1 DNS service pose a threat to internet security. These certificates were issued by Fina RDC 2020, a subordinate of a root certificate trusted by Microsoft Windows. Cloudflare confirmed they did not authorize Fina to issue these certificates, which could be used to decrypt encrypted DNS requests. The incident highlights vulnerabilities in public key infrastructure. While Chrome, Firefox, and Safari are unaffected, Microsoft is taking steps to block the certificates.