In order to scan encrypted network traffic, security software usually installs root certificates on the user's machine. Sometimes on websites with standard digital certificates, the local installed root certificate is shown instead of the actual one.
I have for a while been a bit weary of this, not for snooping reasons, but for phishing reasons. The Punycode PoC phishing site contains a digital certificate, and with other phishing sites being issued certificates too (source), it is possible that checking the certificate on a suspeted site might just reveal a the local root certificate of the security software.
This makes me wonder whether this raises security concerns, as I normally check the digital certificate on pages where I am sending sensitive data to check that everything is ok. If however I am given a local root certificate, I don't have the same degree of certainty.
So essentially how can you know whether a personal root certificate is trusting a genuine site with a digital certificate, or just any site with a digital certificate?