They could display that same "this page is not secure"-page that they display on broken certificates.