Trustcor is apparently connected with a spyware/malware company. Trustcor denied that,but didn’t convince Mozilla and Microsoft.
Or anyone with a couple brain cells to rub together. I mean, sure, they might not be related and this is all a huge misunderstanding, but CAs should be trusted beyond any doubt and Trustcor isn't even close.
My best attempt at a TL;DR:
TrustCor had some connections to an app in which the android version contained spyware. They claim it was placed by a malicious previous employee, no name given. But a recently deceased key founders son was heavily involved with the company that made spyware. I think TrustCor's claim is that the son was only an investor in both firms and therefore had no direct involvement. This seems to not be the case, he is listed as "Key Principal" in a directory-entry about the spyware-company and the person is also mention as an employee of TrustCor in the emails.