Without a valid certificate, any ISP MITM attacks would be obvious