Open Bug 1934361 Opened 2 days ago Updated 23 minutes ago CA Certificate Compliance User Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Steps to reproduce: https://crt.sh/?sha256=421329f0dc2f683d6e96c1b5b310974d0997ad984ef69120f55372b4f48e1037 is mis-issued. google.com has a CAA RR which only allows pki.goog to issue certificates for this domain (I know, this is not a hard proof because this may have changed, but I am very co...