It&#x27;s much more likely that your IT staff will bungle things managing your own CA. And less likely that you will notice it and successfully manage the revocation process.<p>There&#x27;s a lot of fun to be had when someone steals your root CA private keys undetected, and a lot of time &amp; money to be spent ensuring it doesn&#x27;t happen despite Murphy&#x27;s law...