I was disappointed to not see more discussion of how the certificates could have been falsified. It looks like a pretty elaborate system, hopefully they will be

I was disappointed to not see more discussion of how the certificates could have been falsified. It looks like a pretty elaborate system, hopefully they will be able to revoke only the fraudulent signers and have them stand trial.