Comment by dozzie

Oh yes it can. Ever heard of incompetent CAs loosing their private keys and signing rouge certificates?