[msla]

> Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign are no longer considered safe because these certificate authorities failed to follow security practices in the past.

Those are some pretty big names. Names where reasonable companies could believe that nobody would ever dare enforce the rules against them, because it would break the Web.

Who says nobody ever got fired for buying IBM?

Heck. If the for-pay CAs keep screwing up, Let's Encrypt could become the sane, reasonable, conservative choice, even among the most Enterprise of Enterprise Enterprises.

[gsnedders]

They were all subsidiaries of Symantec when their various faults occurred leading to the Symantec distrust; it's all just the Symantec distrust.