In this case, the server certificate or an intermediate CA certificate presented to your browser has been signed using a weak signature algorithm such as RSA-MD2. Recent research by computer scientists showed that the signature algorithm is weaker than previously believed and the signature algorithm is rarely used by trustworthy websites today. This certificate could have been forged.