"@dwolla: Working with our partners at @verisign and @symantec to look into a certificate issue some of our users are reporting. Still secure."
Not a hiccup, apparently -- their Verisign-issued EV cert is still revoked. Things look ok to users because they're now using a GoDaddy wildcard domain cert.
Cert looks valid on my phone. Or am I missing something?