API flaws said to have left Symantec SSL certificates vulnerable to compromise
csoonline.com
csoonline.com
There is some discussion here: https://groups.google.com/forum/#!topic/mozilla.dev.security... Which also includes a detailed comment from Tarah, the Principal Security Advocate and Senior Director of Engineering at Symantec Website Security.