but this is how PKI/SSL/CA works. You are borrowing someone else's trust. You are hoping that the company you get a cert from won't pretend to be you. There is

but this is how PKI/SSL/CA works. You are borrowing someone else's trust. You are hoping that the company you get a cert from won't pretend to be you. There is no technical mechanism to stop this, no matter where the parent company is based. Also the other thing to note is that virtually all communications companies have some sort of government involvement regardless of where they are based.