Normally certificate issuing is done by Secured Socket Layer (SSL) connection. But in that case it will specify the certificate issuer (Like Thawte Consulting in Gmail). In cryptography this kind of a situation is identified as some hacking activity. Better keep an eye out for this GT.