And, one can use tools like "Certificate Patrol" (Firefox addon) to ensure cert isn't changed.