Why is Kazakhstan&#x27;s cert any different than the hundreds of &quot;trusted&quot; root certificates that came preinstalled on my mac?<p>Looking at my mac&#x27;s cert keychain, there are 185 trusted root certs. I don&#x27;t know what any of them are or who has the private key to them.<p>My ISP could MITM my traffic whenever it wants to, if it has the private key of one of the <i>hundreds</i> of trusted root certs on my device.