Looks like dynamic ssl certs are still broken as of 3.2.0.4: microsoft.com uses an invalid security certificate.
The certificate is not trusted because it is self-signed. The certificate is only valid for microsoft.com-----BEGIN CERTIFICATE----- (Error code: sec_error_untrusted_issuer)
