Until that time we have a multinational board controlled CA, is there a list somewhere of the "sensible subset" of browser certs, for various types of users?