Seven Russian banks have moved to a certificate authority run by the state

Of course. Who else would be their CA? Some USA state-run CA? That's far too much political risk.

I hope we see a different CA for each ccTLD in the future.

This is probably the future. Who is better able to verify an identity than a state? State run registrars regulate companies. States issue individuals ID documents. If you have trusted central parries issue encryption certificates it will gravitate to fewer and more centralised issuers.

Decentralised systems such as ssh are different, but I find it hard to imagine trusted central authorities ending up as anything other than states, or so heavily regulated as to be effectively state be controlled. This wax always the big flaw in SSL/TLS. In DNS too.

Might as well merge them all and call FSBank, for they will be sure as hell MITMing all the communication between clients and backends.