It is quite disconcerting that there is an uproar about a feature that forces the sloppy web admins to pull up their socks. As someone already commented, any legitimate business should be able to afford a "real" certificate. If some large government organisations choose to use their own CAs (the US Army being one of the examples), maybe they should make sure that the industry has a way to recognise them as legitimate. On the other hand, what is so special about the US Army that they cannot use the globally accepted CAs?