Forged email address leads to valid SSL cert

Scary that it only took a forged email address to get a "real" cert for a Microsoft Live domain.