No, I don't really expect an average Joe to check certificate details. Explaining certificates to developers is hard enough — I can't imagine trying to get an a

No, I don't really expect an average Joe to check certificate details. Explaining certificates to developers is hard enough — I can't imagine trying to get an average joe to comprehend it. What details would they realistically look at, anyways? If the certificate validates, that's an automated check of most of the interesting bits. But the first thing in my dialog, for example, is the subject, which is garbage for many DV certs. Then there's the difference between CN and subjectAltName…