CAs do not have backdoor access. The most a rogue CA can do is possibly enable a MITM against a website that has taken no protections.<p>Google pins their public key fingerprints right into Chrome, and this feature is open:<p><a href="https:&#x2F;&#x2F;hstspreload.appspot.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;hstspreload.appspot.com&#x2F;</a>