Comment by nilslindemann

> The current CA ecosystem is *heavily* driven by web browser vendors (i.e. Google, Apple, Microsoft and Mozilla), and they are increasingly hostile towards non-browser applications using certificates from CAs that they say only provide certificates for consumption by web browsers.

Let's translate and simplify:

> The current CA ecosystem is Google. They want that only Google-applications get certificates from CAs.