2 ms·

Yes, and with those scenarios if your root certificate has been maliciously modified https isn't going to save you either