Don't forget that 90% of the world's certificates are issued by five commercial CAs, who happen to be friendly with various national security agencies.