It is frustrating that the ecosystem remains the way it is. I suppose mostly to support internal self-signed certificates where you don't want all your interna

It is frustrating that the ecosystem remains the way it is. I suppose mostly to support internal self-signed certificates where you don't want all your internal hostnames being exposed via certificate transparency. And, also, the crappy corporate monitoring MITM industry that desperately feels the need to spy on employees. It is a complex mess, where platforms (android, iphone, windows, linux, etc), languages (python, java, node, etc), browsers, web servers, and other pieces all handle client and server certificates in completely different ways.