I wouldn't be surprised. Some fairly large banks here in Norway have at times ran with a not-completely-valid SSL certificate - making the bank login indisting

I wouldn't be surprised. Some fairly large banks here in Norway have at times ran with a not-completely-valid SSL certificate - making the bank login indistinguishable from a man-in-the-middle. Answer from their phone support? "Oh yeah whenever you see that warning, just click 'allow' or 'ignore'."