You can even see the regulator’s web site to prove a website sells the mandatory certificates