There was once an incident where a Dutch CA gave an Google cert to an unknown party https://www.theregister.com/2011/09/02/google_chrome_diginotar/