Yeah, but you can't remove all the CA certs from your users' browsers, which is the issue. www.bank-of-america.ru will not display anything out of the ordinary to real users.