I agree. But imho this is no reason to not include the suggested feature.

There are so many settings and warnings that a common user does not understand. This new one would not scare any users away I guess. They will just ignore it.

I would be very happy to notice that my browser suddenly uses a different certificate to validate the certificate of one of my servers.