In reply to Chuck.

I completely agree with you. There needs to be real vetting to ensure 1.) the applicants who receive the certs are who they say they are, and 2.) the cert is being used by a business/organization that's operational. No one cares if the connection is secure if the connecting server is maintained by Guccifer 3.0! I foresee free DV type certificates being deprecated at some point.