Because Google doesn't want anyone using PKI for anything but simple websites