They absolutely do. They have a social responsibility as long as they are on the list of CAs trusted by browsers.