@q To be honest, we are talking about CAs. Nothing with them is really trustworthy. If _one_ of them messes up or is coerced into doing something, everything above it is broken.