Cloudflare's CT monitoring GA, now filtering out its own issued certs via SPKI hashes, because noise is apparently a feature.

Unsigned CA cosigner certs are now a thing, as TrustAsia files for Chrome’s MTC test root store.