On: Browsers Take a Stand Against Kazakhstan’s Invasive Internet Surveillance

[MaxBarraclough]

In the interests of precision: nothing there says it was the doing of the Chinese state. A private company, MCS Holdings, was at fault there.

[codedokode → MaxBarraclough]

It doesn't matter who ordered to issue a certificate, a CA must not issue fake certificates anyway and discovery of such a certificate is a proof of violation of rules.