Fire Alarm Companies

"This is really bad news. As DigiNotar is a 'root' certificate, they can assign authority to intermediaries to sign and validate certificates on their behalf," security firm Sophos explains. "It appears the attackers signed 186 certificates that could have been intermediate certificates. These certificates masqueraded as well-known certificate authorities like Thawte, Verisign, Comodo, and Equifax."