It might lead to a false sense of security. I don't think it'd be overkill to send a request to all 52 CAs (and fail if you get conflicting answers). Then the

It might lead to a false sense of security. I don't think it'd be overkill to send a request to all 52 CAs (and fail if you get conflicting answers). Then the most a trusted CA could do is DoS some sites.