The pathetic part of EVs is that they should have been issued by whatever the business register/regulator is in the country of issue.

Not some arbitrary group like D&B etc.

The US/other countries should have ensured that each state/registration area had an appropriate cert to sign with.

It should be part of my company's annual registration/reporting expenses that they issue the appropriate certificate for "*.<mycompany>.<2LDs>.<gTLD>", signed by them (and by the TLD root cert of the nation of registration).