[Jensson]

All you need is a list of trusted CA's, like we do right now, and then issue a warning if it isn't on that list. It is a very simple plugin to make.

[g-b-r]

These certificate authories will also issue legitimate certificates btw, the regulation explicitly encourages local states to use them for their services