An attacker could trick a less-known certificate authority into giving them customer information

Only those that have been in business long enough actually have the appropriate resources to encrypt and decrypt data

An attacker could pose as a certificate authority or a certificate authority could be in alliance with an attacker

None of the above