That is how what specifically doesn't work? Could you specify? Digicert's root certificates serve all purposes, not just serverauth. NSA can and will use CA ce

That is how what specifically doesn't work? Could you specify? Digicert's root certificates serve all purposes, not just serverauth. NSA can and will use CA certs to mitm when they want, there's no need for overt malfeasance on Digicert's side.