Cloudflare says it should have caught mis-issued 1.1.1.1 certificates earlier

This is example why certificate hashes matter. https://github.com/dnscrypt/doh-server?tab=readme-ov-file#wh...