Update on Dutch news site nu.nl (without references or sources, so I can't confirm where they got this information from).

http://translate.google.com/translate?tl=en&u=http%3A%2F...

Fraudulent certificates were given out for:

().mozilla.org (backdoored software?)

().wordpress.com

().torproject.org

().yahoo.com

And Baladin (an Iranian social network)