Then we can delist compromised CAs, yay :)

(Sure, it'll take time, but gaps seems to be closing on so many layers)