Comment by yjftsjthsd-h

> we just trust these organizations to not deploy wildcard malicious certificates.

Don't we have transparency logs to check that now?