Oh, this reminds me if TurkTrust scandal[0] when they granted a local govt. corporation the ability to generate fake certificates and they were caught when generated fake Google certs. Considering the identity of the mayor, I'm still not convinced that no people were harmed.

[0] https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ss...