Historically, singular domain validation bugs have not killed CAs.