Comment by mcpherrinm

The flipside of the same technical points is https://sslmate.com/blog/post/entrust_distrust_more_disrupti... where some non-browser clients don't handle this, or worse, handle it incorrectly.