{"id":41766,"date":"2025-09-05T02:24:43","date_gmt":"2025-09-04T23:24:43","guid":{"rendered":"https:\/\/digitrendz.blog\/?p=41766"},"modified":"2025-09-05T02:24:47","modified_gmt":"2025-09-04T23:24:47","slug":"rising-threat-more-1-1-1-1-certificates-mis-issued","status":"publish","type":"post","link":"https:\/\/digitrendz.blog\/z\/newswire\/technology\/41766\/rising-threat-more-1-1-1-1-certificates-mis-issued\/","title":{"rendered":"Rising Threat: More 1.1.1.1 Certificates Mis-Issued"},"content":{"rendered":"
\u25bc Summary<\/summary>\n

– Three mis-issued TLS certificates for Cloudflare’s 1.1.1.1 service were discovered, raising concerns about potential decryption of encrypted DNS queries.
– An audit revealed that Fina CA mis-issued a total of 12 certificates, nine more than initially known, all of which have been revoked.
– Cloudflare stated there is no evidence that any of the certificates were used maliciously to impersonate its services.
– Fina CA claimed the certificates were issued for internal testing due to an error in IP address entry and were published as part of standard procedure.
– Cloudflare acknowledged it should have detected the mis-issuances earlier through Certificate Transparency, which it helps administer.
<\/p>\n<\/details>\n\n

<\/p>\n\n

T<\/mark>he recent discovery of mis-issued TLS certificates<\/a><\/strong> for Cloudflare<\/a>\u2019s widely used 1.1.1.1 encrypted DNS<\/a> service has sent ripples through the cybersecurity community. Security experts are alarmed by the possibility that unauthorized parties could have gained the ability to intercept and manipulate encrypted DNS traffic, potentially redirecting users to harmful websites or eavesdropping on their queries. This incident underscores the critical importance of robust certificate management and oversight in maintaining trust across the internet.<\/p>\n\n

Since the initial report, further investigation has revealed that the scope of the problem is larger than first thought. Cloudflare has confirmed<\/strong> that a total of twelve certificates were improperly issued by Fina CA<\/a>, a Microsoft<\/a>-trusted certificate authority<\/a>, with nine of those certificates having been issued since February of this year. All of these certificates have now been revoked, though the company states there is no evidence they were used maliciously in any attack or impersonation attempt.<\/p>\n\n

Cloudflare acknowledged that its own monitoring systems, including participation in the Certificate Transparency<\/a> framework, should have detected these irregularities sooner. The company helps administer this very system, which is designed to provide public oversight of certificate issuance and prevent exactly this kind of error or misuse.<\/p>\n\n

For its part, Fina CA provided a brief explanation, stating that the certificates were generated during internal testing<\/a> of its production certificate issuance process. According to the CA, the mis-issuance resulted from an error in entering IP addresses. The certificates were published to public Certificate Transparency logs as part of standard procedure, which is how they eventually came to light.<\/p>\n\n

(Source: Ars Technica<\/a>)<\/em><\/p>","protected":false},"excerpt":{"rendered":"

Mis-issued TLS certificates for Cloudflare’s 1.1.1.1 service raised security concerns, potentially allowing interception and manipulation of encrypted DNS traffic. Cloudflare confirmed twelve certificates were improperly issued by Fina CA, all now revoked with no evidence of malicious use. The er…<\/p>\n","protected":false},"author":1,"featured_media":41765,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"cybocfi_hide_featured_image":"","footnotes":""},"categories":[6579,3297,3327,3254],"tags":[65520,65518,64171,65519,64172],"entities":[3844,16065,60689,65522,24209,904,4020,26195,3565,60340],"class_list":["post-41766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bigtech-companies","category-cybersecurity","category-newswire","category-technology","tag-certificate-transparency","tag-cloudflare-1-1-1-1","tag-dns-security","tag-mis-issued-certificates","tag-tls-certificates","entity-cloudflare","entity-dns","entity-february-2024","entity-fina-ca","entity-https-2","entity-microsoft","entity-thursday","entity-tls","entity-wednesday","entity-wednesday-morning"],"_links":{"self":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/41766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/comments?post=41766"}],"version-history":[{"count":0,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/posts\/41766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media\/41765"}],"wp:attachment":[{"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/media?parent=41766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/categories?post=41766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/tags?post=41766"},{"taxonomy":"entity","embeddable":true,"href":"https:\/\/digitrendz.blog\/z\/wp-json\/wp\/v2\/entities?post=41766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}