[notorandit]

It's not Microsoft being careless about CAs. That's been made on purpose by them to comply with some request in order to keep a slice of their market.