The CA's are legally compelled to issue 'global certificates' that always return as valid so they can do MITM attacks at will. It's fairly well documented if y

The CA's are legally compelled to issue 'global certificates' that always return as valid so they can do MITM attacks at will. It's fairly well documented if you google around. And note, while it may seem like a terrible thing, it really isn't. The issue isn't that they're able to do it, the issue is how rigorous they are with their process of deciding to do it. There is absolutely a valid reason for the government to want to do this.