The breach at Netherlands-based DigiNotar, which is now known to have lingered for several weeks, could have been avoided. The system is flawed because it is disjointed and unregulated, it’s the Wild West. The more abstract you are from the Web browser to the root CA, the more people there are that can be compromised. The good news is that the breach could lead to stricter policies regarding intermediate CAs, an expert says. In the meantime, continued self-policing among browsers is likely, so much security and privacy on the line is the best.”]
Source: https://www.inforisktoday.com/blogs/certificate-security-in-wild-west-p-1073