SSL Certificate Issues / CAs enabling Scammers?

To add on this: it's exploitable as well.

You can get an EV certificate with any organisation name you want, you just need to incorporate a paper company somewhere.