[ktpsns]

No, let's do a punycode attack: It "looks" like it was https://mysite.example but is not. And yet it has the green padlock.