Page "X.500" Paragraph 19

Some options do exist to check notaries to see if a certificate has only recently been seen, and therefore more likely to have been compromised.

If the cert is likely to be trusted and is failing because the domain name is a slight mismatch, it will then initially fail in the browser, but then be subjected to the notary trust, which can then bypass the browser warning.