I wouldn't call it fairly obvious, but according to this comment -> http://news.ycombinator.com/item?id=5003707 http://news.ycombinator.com/item?id=5003707 -> t

I wouldn't call it fairly obvious, but according to this comment -> http://news.ycombinator.com/item?id=5003707 http://news.ycombinator.com/item?id=5003707 -> the CAs issued included "*.EGO.GOV.TR," which then created the fake Google certificate. If a government entity got access and then did this, you could establish a link between TurkTrust & the government for creating the CA. That being said, I'd hope that someone researches and figures out why the certificates were issued, to whom, and for what purpose.