In practice they delegate certification to a legacy and expensive certification authority