Frank Siebenlist writes: > name-issuing to a CA is the only safeguard you have against any rogue CA > among the zillions that may be present in your trusted CA-directory. If you don't / can't trust the CA - don't use it.