Baseline Requirements section 18.104.22.168.1 prohibits ipAddress SANs from =
containing IANA reserved IP addresses and any certificates containing =
them should have been revoked by 2016-10-01.
There are seven unexpired unrevoked certificates that are known to CT =
and trusted by NSS containing reserved IP addresses.
The full list can be found at: https://misissued.com/batch/7/
TI Trust Technologies Global CA (5)
Cybertrust Japan Public CA G2 (1)
It=E2=80=99s also worth noting that three of the "TI Trust =
Technologies=E2=80=9D certificates contain dnsNames with internal names, =
which are prohibited under the same BR section.