In <a href= http://www.youtube.com/watch?v=Z7Wl2FW2TcA>his Black Hat talk</a>, Marlinspike mentions that CitiBank deploys distinct certificates for each of many https servers and this causes problems with his Convergence proposal.