I don't think that fraudulent behavior by site operators is relevant to the X.509 certificate system. All that the certificates do is make it possible to ensur

I don't think that fraudulent behavior by site operators is relevant to the X.509 certificate system. All that the certificates do is make it possible to ensure you are talking to the server at the address you intend to communicate with. TLS has nothing to do with the morality, ethics or legality of the site operator. It's too bad that the English word "trust" has so many meanings that people get confused about what it means in this context.