As if certifications would prove anything. Just look at what the German tüv certifies secure. They are missing even the most basic XSS stuff. I have no hope here.