Hacker News Reader

Worse yet, why is that CA even part of the Root CAs shipped on all the modern devices?

My trust in those vetting the CAs is completely broken now.

It's not. The CA in question is an intermediate CA that somehow managed to convince a root to sign their public key.

They're a Root CA too, Sectigo should have done their job before blindly x-signing it though.

They were a root CA.