https://cpj.org/?p=15010
More on certificate authority proliferation