Certificate Authorities and Governments provide no means to be able to verify the authenticity of their Cerificate issuance system.

Nearly all of Secure web traffic is based on "Just trust me bro"