A bug in digital certificates means millions need to be revoked, leaving well-known websites insecure.