A private key generation flaw allowed anyone to guess them and forge HTTPS certificates for any website.

Read Original Source