Also, they (CA+cert) are broken beyond repair. I understand lulling users into false sense of security because they don't understand what they are doing, and scary message is scary. But CA chain is so insecure today, that I would rather trust cached cert, my 'convergence' setup or luck than happy green lock icon.