I am sure they have a private key of some of the CAs shipped with major browsers lying around somewhere...
Reply on news.ycombinator.com