Do Son Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.
1.1.1.1
Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.
Cloudflare's 1.1.1.1 public DNS resolver experienced a global outage on July 14, 2025, confirmed as an internal configuration error, not a cyberattack or BGP hijack.