@joepie91 The hierarchical certificate chain system was a bad idea to begin with, partly specifically because it makes this sort of attacks easy-ish.