I expect there’s also been a degree of grandfathering of the root certs from a time where there was a lot less scrutiny.