in SSL/TLS, the client … contains more than 100 hard-coded certificate-authority certificates that … Many hard-coded CAs are completely unknown; they often … moribund, and in some cases, CA keys have … Subverting any one CA component compromises the entire … about three-quarters of all certificates in use by … [ref].
Google-1
Google-2
Copyright clearance needed for quotation.