Oh snap! That definitely sounds possible. Found more info about it.

tl;dr: Either the attack is ineffective against some browsers that check the certificate transparency logs (like Chrome), or the attack is visible and the CA will lose all its credibility (hopefully being removed from the browsers).

Amazingly, the answer to #5 is yes!

That would be just a nuisance until a new certificate is generated with another vendor (possibly not for free, but cheap enough).

It opens the possibility of a man-in-the-middle attack.

First let’s identify what parts of the world are free-er than the US (for a certificate).

Same here, I run Mint everywhere I can, and the XFCE edition works especially well in old machines.

Alpine is better suited for servers and especially containers, because the images can be really small. If you got enough RAM, there’s an installation mode that runs on it without writing to disk, pretty cool for systems where you want always to reboot in the same state.

Now I’m curious. What did you try that didn’t work?