0 / 60 seg.

Except they can, if they hack into a foreign CA and issue rogue certificates.