This question already has an answer here:
I recently heard from one of my friends that we can create our own SSL certificate.
So IF I am going to create a fake SSL cert for a fake bank site, its going to auto get HTTPS and say secured in browser address bar right?
So how safe are HTTPS sites? (with respect to fake sites)