Vulnerabilities Allow Attacker to Impersonate Any Website | Threat Level | Wired.com

   "Basically when these vulnerable browsers check the domain name
    contained in the attacker’s certificate, they stop reading any
    characters that follow the “\0″ in the name. More significantly,
    an attacker can also register a wildcard domain, such as *\0.
    badguy.com, which would then give him a certificate that would
    allow him to masquerade as any site on the internet and intercept
    communication"
 
 - Vulnerabilities Allow Attacker to Impersonate Any Website | Threat Level | Wired.com
   http://r0.sharedcopy.com/7do758p