aaand episode #352381 of "woah all these people who i thought were sophisticated are actually just a bunch of lazy / ignorant sysadmins". wouldnt want one obscure CA you never heard of to get hacked, that would compromise every other website (or maybe not with this X.509 name constraints gimmick people are talking about in this thread)