> So, no "doubling down" involved Continuing to use a CA that has a recognised history of fucking abysmal security and wilfully deceptive actions, whether you'

> So, no "doubling down" involved Continuing to use a CA that has a recognised history of fucking abysmal security and wilfully deceptive actions, whether you're paying money or not, is still "doubling down" IMO. If you're getting a wildcard cert, you aren't getting EV, so why not just make the switch to LetsEncrypt?