In addition, it's probably not the best idea to rely on a gov-friendly CA which is shipped with the OS and instead educate people how to do this right. I mean, that is after all why you're coding this. ;)