I know the EU is still kicking around the concept of making itself a root CA and each country an intermediate in that chain, then legally mandating the installation of that CA on all devices. This is dangerous as hell as it effectively defeats the purpose of TLS and gives the government(s) a way to decrypt all HTTPS traffic using those bogus cert chains.