>people who seriously know how to code mission critical X.590 root CA PKI infrastructure are not cheap
And they also aren't working at letsencrypt.
And they also aren't working at letsencrypt.
I know a couple folks at Let's Encrypt in passing and they are at the top of my list of folks I would want writing code for me if I needed to trust it with, if not my life, most stuff up to that point.