Actually, Verisign has come under intense criticism because anyone can get a certificate from them. They do not check anything out, their certificate just says that they 'gaurantee your identity.
It does not say you are ethical. Anyone who is not faking their identity can get a certificate, but it means little more than 'Yes, Verisign gaurantees
www.some_domain. biz is who they say they are'.
It is like an electronic signature, or security certificate you can get for your emails. I send an email using one account I have a cert. for, and the recievers see that it is from me, not a spammer of spoofer.
But I could, if I wanted to, send my own malicious code and infect my friends computers, or anyone else who thinks because I have a certificate, I am safe.
Mostly, though, they do convey a sense of security, and not many people that are fraud artisits are going to get their identity registered!
I would listen to above, if there is all this complicated, seemingly unnecessary steps involved, get more gaurantees. Domains can be transfered without hassle, all they (the sellers) have to do is say 'okay' and whoever you use to register the domain for you can then proceed. All the hoople is not necessary, and is suspicious, IMO :O)