They didn't need to do that. They simply got their cert into browsers and OSes, and there you go.