[dasrecht]

yes this sould not be the core of the problem. its important to know _who_ owns the debatable CA.

This gives a great Mitm Vector if i'ts a malicious CA

[wallflower]

Is it possible to do a web crawl scan of https and SSL certs and find out which certificates have this questionable one as their root?