Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.