Thawte have at least began hiding the SGC option. Also note that Netscape Step-Up (not to be confused with MS SGC) depends on insecure renegotiation, which is d

Thawte have at least began hiding the SGC option. Also note that Netscape Step-Up (not to be confused with MS SGC) depends on insecure renegotiation, which is disabled in many servers now (I have a few pcaps I did with Netscape 4 showing this, and I really should factor the 512-bit RSA keys in some of them at some point). Another trivia is when VeriSign began selling EV certs in 2007 they only sold it with SGC, even though it was becoming obsolete even back then.