Certifi-gate vulnerability

After reading this article, and through the blog post by Check Point, I decided to get the app to see if the One with OxygenOS 1.0.2 was vulnerable. It appears it is.

Can others confirm? Does anyone know what is the offending app and how to disable/remove/etc it?