Thawte happily sold certs to US entities like universities (I was a sysadmin at one of those universities with such a cert :) )