@Greg Grossmeier They need to go through a lot of processes, including becoming a browser-installed real CA, right?

It looks like they're working with Mozilla though, so that's good.