[bobmcnamara]

It'll also work DigiNotar-style, when using the only root CA blessed by the National Information Network for general use: I.R. Iran.