Hmm, considering the fact that Mark Schuttleworth is the founder of both Thawte and Ubuntu...
And Ubuntu is Debian based
And Debian's SSL suffers from a giant randomness issue
And www.thawte.com runs on Ubuntu
And Ubuntu is a large Certificate Authority
Does that insinuate all Thawte certificates are ready for a review? :P