It depends on the root certificate usage policy. I think they ought to be setting it for usage for client identification only. If it's for server identificati

It depends on the root certificate usage policy. I think they ought to be setting it for usage for client identification only. If it's for server identification too, I wouldn't trust it. Most certificate stores will not allow the import of a certificate that has been signed by a trusted root that it doesn't know about. That is why you're required to import that root cert. As for what features it states that it supports ... That's another matter entirely!