plot twist: letsencrypt.org
In that way, an ambitious project that gives away certificates that were formerly worth a lot of money would be a pretty slick honeypot because now you could stow away private keys and have a copy of most of the encrypted webs certificates to decrypt in-flight communications.
https://en.m.wikipedia.org/wiki/Certificate_Transparency
The log is like a git hash-chain: you can never erase the past without affecting the whole chain after the erasure.
If you want hidden backdoors, put them in hardware, not software. Chips are the best place.