sites affected by dropping the geotrust root (apple store, apple news etc) are on different CAs now and the other known ones are api endpoints not so likely to be important in a standard browser. OK robert, landry said 'rm all the things' earlier which I am treating as an OK ;)