[chuckee]

> such authority

Key word "such". Prescribing which certificates I am obligated to trust is many many steps beyond e.g. banning DRM circumvention (which is itself a step too far IMO).

[Jensson]

Likely it only applies to software you ship to users in EU, not software you use yourself even if you are in EU.