For instance, the PKIs supporting HTTPS[2] for secure web browsing and electronic signature schemes depend on a set of root certificates.
This led to the issuing of various fraudulent certificates, which was among others abused to target Iranian Gmail users.
The trust in DigiNotar certificates was retracted and the operational management of the company was taken over by the Dutch government.
[5] On April 2, 2015, Google announced that it no longer recognized the electronic certificate issued by CNNIC.
[6][7][8] on April 4, following Google, Mozilla also announced that it no longer recognized the electronic certificate issued by CNNIC.