Ah, forgot that the trust model is only based on having a valid certificate for the domain, not on the specific certificate. Which is only a problem if someone

Ah, forgot that the trust model is only based on having a valid certificate for the domain, not on the specific certificate. Which is only a problem if someone manages to hijack the domain long enough to get a valid cert. Google is probably less likely to loose control of its main domains than other groups that sometimes just forget to keep track of them.