@ionchy a root CA (a thing that somehow exists) generated several keys with exactly one byte of entropy (it is believed somehow the output of their hardware security module was truncated to one byte and then zero-padded to 32 bytes, which is a fucking ridiculous thing to say) and one of those one-byte values is 4. so you could plug 4 into an elliptic curve and present a TLS cert valid for the whole internet, which is a thing the internet was constructed to allow