[raverbashing]

Yes, I agree. The crying wolf is too much sometimes.

Accepting certificates from a given issuer does not give them the issuer the right to impersonate others

[g-b-r]

All root CAs can issue certificates for any site (except those with CAA records etc.)