This could actually work for certificate attestation if baked directly into the browser.

https://github.com/google/certificate-transparency