content: Correct me if I'm wrong, but isn't a security certification meant to allow a site to say "yes, we are who we say we are"?  The vast majority of certificates on the web merely establish that you're connecting to the server you want and not somebody else. Extended certificates validate identity(and are expensive enough that few people bother with them).