https://en.wikipedia.org/wiki/Convergence_(SSL)

shame it wasn't adopted. rent seeking CAs would never go for it.