The list of domains for which forged SSL certificates were issued by root certification authority DigiNotar includes popular websites like Facebook, Skype, Twitter, as well as spy agencies like the United States’ CIA, Israeli secret service Mossad, and British spy agency MI6, according to the Dutch Ministry of Justice.

The Dutch Ministry of Justice released a list over the weekend, revealing that the number of forged security certificates issued by the hacked Dutch firm reached to a total of 531 sites, much higher than previously estimated.

DigiNotar, a Dutch arm of VASCO Data Security International Inc., suffered a cyber attack in July. Hackers produced hundreds of forged certificates for third-party domains.

The hack came to light late last month when Internet search giant Google announced that Gmail users in Iran could suffer a loss of their log-in credentials as breached the security of DigiNotar and stole the digital equal of an identification card for Google. com.

Many believed that the main purpose of the attack was to spy on Iranian dissidents. On Monday, a Dutch government report also alleged that the Iranian hackers breached the security of the Dutch computer security firm and stole computer security certificates.