Trust me, I'm a Root CA! Analyzing SSL Root CAs in Modern Browsers and Operating Systems
The SSL landscape: a thorough analysis of the x.509 PKI using active and passive measurements