They are currently using a CA that is not installed on our servers. Since it isn't a top-tier CA and we aren't submitting anything particularly sensitive anyway, we don't have to feel too bad about this.
