[caf]

...and what compounds the problem is that CAs are trusted on an all-or-nothing basis - you don't have a concept of "this CA is trusted only for .nl domains, and this other CA is trusted only for .cn and .hk domains".

[jamesgeck0]

Chrome plugins are too limited, but could this functionality be implemented via a Firefox extension?