Hacks waged against companies that issue security certificates for websites are calling into question long-standing domain name verification practices.