I personally think if the certs are signed by the government, it's for government service. And they can eaves drop at application level (decrypted) anyway...