> For example, a company from country A limited to A's national TLD? That's not an example of limiting CAs to certain TLDs; that's an example of limiting certi

> For example, a company from country A limited to A's national TLD? That's not an example of limiting CAs to certain TLDs; that's an example of limiting certificate users to a single CA. I'd sooner use a self-signed certificate than one signed by a monopoly government-controlled CA.