Sure. But one important point here: Verisign doesn't tell you to trust Amazon. What Verisign can tell you is that you can trust that the server you're talkin

Sure. But one important point here: Verisign doesn't tell you to trust Amazon. What Verisign can tell you is that you can trust that the server you're talking to right now is in fact affiliated with Amazon (in the case of EV certs) or corresponds to the hostname in your URL bar (in the case of regular certs). As long as no certificates got stolen, no one mis-issues certificates, etc....