I'm writing an article about new government law in Kazakhstan. The law was accepted in December, but now one of our providers announced information for small and medium business how to install government-provided root SSL certificate: https://www.beeline.kz/b2b/sme/ru/press_centers/10040
Yes, they really want to listen the whole traffic of all citizens.
I want to show in my article that this is really-really bad solution. And I need all information about possible vulnerabilities of it.
The certificate is valid for 4 years, data size, as I think, 1024 bytes.
Link to the cert: https://www.beeline.kz/uploads/document/file/11120/QAZNET.rar