> and no TLS certificates chaining to these CAs ever showed up in CT

Why are browsers trusting CAs which issued zero certificates since their creation 1 year ago?

skywhopper 7 hours ago | parent | next [-]

These are intermediate roots, signed by trusted root certs, so the trust from your OS or browser is implicit to the roots it trusts.

▲

akino_germany 6 hours ago | parent [-]

Yes, but there was no TLS cert issued that had these intermediate certs in its chain of trust at all anywhere. So why are they a CA if they don't issue any certs?

	▲	Uvix 5 hours ago \| parent [-]
		Their other intermediates have issued certs.

▲

7 hours ago | parent | prev [-]

[deleted]