Why Internet users cannot completely trust certifications