In reply to Sarah Gooding.

Hi Sarah,

That only has relevance to a world in which certificate pinning is being widely used - which is not the case today. Without certificate pinning, where a certificate comes from neither helps nor hinders the process of forging an alternative certificate. Moreover, when a certificate authority signs a certificate request, it doesn't have the certificate's private key. There's no "pool" of private keys that they have access to, that a state or other actor would gain special privileges by accessing... it's a key part of the design of SSL that the private key is private: even the certificate authority doesn't know it.

David