And there would be no point in doing so anyway. Chrome, etc., require that certificates which descend from publicly trusted roots have their certificates publi

And there would be no point in doing so anyway. Chrome, etc., require that certificates which descend from publicly trusted roots have their certificates published in certificate transparency logs. Someone would quickly notice bogus certs being issued and the associated root would get blacklisted.