Attackers hijacked DNS at the .gh, .sl and .as domain registries to obtain real, browser-trusted TLS certificates ...