> and no TLS certificates chaining to these CAs ever showed up in CT
Why are browsers trusting CAs which issued zero certificates since their creation 1 year ago?
These are intermediate roots, signed by trusted root certs, so the trust from your OS or browser is implicit to the roots it trusts.
These are intermediate roots, signed by trusted root certs, so the trust from your OS or browser is implicit to the roots it trusts.