Interesting that this is going to Brazil again. So someone should check if there have been letsencrypt certificate created using DNS verification during those 3 minutes, like in 2016 https://www.thesslstore.com/blog/ssl-certificates-used-in-ma...
"Does CT prevent certificate mis-issuance?"
"No."
"So certs were mis-issued, your bank got hacked, and all your money is gone?"
"Yes."
"So are you going to fix internet infrastructure to prevent cert mis-issuance in the future?"
"Why would we do that? We've got logs, we can see it happen."
"But banks will get hacked again!"
"I don't see your point."