To some extent this would provide a false sense of security, as if the CA misissues a certificate it wouldn't stop it from being used to hijack your session wit

To some extent this would provide a false sense of security, as if the CA misissues a certificate it wouldn't stop it from being used to hijack your session with an iframe.