The Italian investigation of Expedia and its rival Booking.com follows similar actions in the U.K., France and Germany
Some reissued SSL certificates use the same vulnerable key as the ones they replace, and some sites moved to a vulnerable version of OpenSSL