Clemens on Nostr: Where can I find details about what the CA allegedly did wrong? "trust us" isn't ...

Where can I find details about what the CA allegedly did wrong? "trust us" isn't enough here, and documentation for that change and its CVE is scarce to non-existent.