Finally long-lived, well-known serious matter listed as vulnerability. It's good to check who signed for your favorite service's TLS with bit of knowledge about CAs. Nearly all TLS problem can be prevented if you pay attention and have control to TLS.