A Spanish CA, for instance, can issue a certificate for a US government website, and vice
versa. This was coherent with the decentralized nature of the Internet (avoiding single points
of failure), but has turned instead into an “any-point-of-failure” problem