Changes

# Single point of failure: Having only one CA in the trusted root folder can create a single point of failure. If that CA is compromised or becomes unavailable, the PC may be unable to establish secure connections with any servers or services that rely on that CA.

# Single point of failure: Having only one CA in the trusted root folder can create a single point of failure. If that CA is compromised or becomes unavailable, the PC may be unable to establish secure connections with any servers or services that rely on that CA.

# Lack of flexibility: Having only one CA in the trusted root folder can limit a PC's ability to establish secure connections with a variety of different servers and services. This can be particularly problematic if the CA is not trusted by all organizations or industries.

# Lack of flexibility: Having only one CA in the trusted root folder can limit a PC's ability to establish secure connections with a variety of different servers and services. This can be particularly problematic if the CA is not trusted by all organizations or industries.

# Increased vulnerability to attack: Having only one CA in the trusted root folder can increase the potential attack surface of the PC's trust infrastructure. An attacker may be able to compromise the CA and use it to issue fraudulent certificates, which the PC would then trust.

# Increased vulnerability to attack: Having only one CA in the trusted root folder can increase the potential attack surface of the PC's trust infrastructure. An attacker may be able to compromise the CA and use it to issue fraudulent certificates, which the PC would then trust. ''"If the root CA were to be compromised, an attacker could gain control of the entire PKI and compromise trust in the entire system, including any sub-systems reliant on the PKI. It is considerably more difficult to replace a root CA compared to an Intermediate CA."''<ref>"Keep the root CA offline and be unavailable for use", Nov 6, 2020 , https://www.ncsc.gov.uk/collection/in-house-public-key-infrastructure/pki-principles/keep-the-root-ca-offline-and-be-unavailable-for-use</ref>

# Limited support for legacy systems: Having only one CA in the trusted root folder may limit the ability to support legacy systems or specific functionalities.

# Limited support for legacy systems: Having only one CA in the trusted root folder may limit the ability to support legacy systems or specific functionalities.

# Dependence on single vendor: Having only one CA in the trusted root folder means that the PC is dependent on a single vendor for the maintenance and updates of the trusted CA. If that vendor goes out of business or loses its accreditation it can lead to trust issues.

# Dependence on single vendor: Having only one CA in the trusted root folder means that the PC is dependent on a single vendor for the maintenance and updates of the trusted CA. If that vendor goes out of business or loses its accreditation it can lead to trust issues.