A security researcher once obtained a certificate for Microsoft's live.com domain by registering an email account sslcertificates@live.com and using it to reply to the CA's verification email.

http://www.theregister.co.uk/2011/04/11/state_of_ssl_analysi...