[SSL Observatory] did they generate impostor EV certs? (was: SSL CA compromise in the wild)

[Hodges, Jeff]

I note that the legit certs presented by <https://login.live.com/> and <https://addons.mozilla.org/> are regarded as EV certs by browsers -- are the impostor certs for those two domains also treated as EV? Has anyone tested this? 

thanks,

=JeffH