An offshore company that is trusted by the major web browsers and other tech companies to vouch for the legitimacy of websites has connections to contractors for U.S. intelligence agencies and law enforcement, according to security researchers, documents and interviews.
GrapheneOS maintainers just pushed an update to distrust this CA certificate. https://grapheneos.org/releases#2022111000