It is not like some cheeky kids would just DDoS the signing authority itself, or hammer bleed the host TLS library yet again.

There are also good reasons many serious admins don't trust signing authorities. If you know... you know why... =3