Comment by forward1

The article borders on irresponsible by not explaining the full implications and risk of trusting a root CA, even if you're its sole private key custodian.