Minor correction: on Chrome you can still get to the page if the browser doesn't trust the CA, the option is just hidden.