The software vendors root key is a single point of failure. Expect your detractors to feast on it in no time.

This won't work unless there's multitude of certificate issues and infrastructure providers accept a number of them. Not a problem unless you were counting on some sort of certificate monopoly to fund development.