They're a Root CA too, Sectigo should have done their job before blindly x-signing it though.