Don't forget when Azure had it's root cert compromised. Which... maybe is still a thing?