Como–D'oh! Infosec duo exploits OCR flaw to nab a website's HTTPS cert

Pair abused typo blind spot to game certificate authority

Two European security researchers exploited Comodo's crappy backend systems to obtain a HTTPS certificate for a domain they do not own."