This is a bit worrying, but you should never only rely on digital certificates, I always turn this feature off in security tools.