The permanent members of the Security Council, obviously.

The US, which already centralises the internet by running .com and developed most of the software using these certificates?

It's not like they cannot introduce a bad certificate right now. We would be just be taking the ability from all other countries from doing the same.