That's how the CA system currently works: you generate a key and a certificate signing request, and only disclose the public key via the CSR to the CA. The CA t

That's how the CA system currently works: you generate a key and a certificate signing request, and only disclose the public key via the CSR to the CA. The CA then uses their own key to sign yours. The CA key literally cannot be exported, and this is audited. Wiretapping is immediately evident based on the key used in any malicious certificates; HPKP helps this.