Chrome blocks unauthorized HTTPS certificates after.gh,.sl and.as hijacks

Google says attackers hijacked the.gh,.sl and.as country-code top-level domains, changed DNS records and obtained unauthorized HTTPS certificates for several Google domains and domains belonging to other organizations. Chrome blocked certificates it identified, and Google worked with issuing authorities to revoke those for its properties. Google says Chrome users need no action, but urges domain owners to monitor Certificate Transparency logs and publish restrictive CAA records.