IoT devices are using weak digital certificates that could expose them to attack, according to a study released over the weekend.