[tialaramex]

> It's actually pretty difficult to enumerate all trusted CAs (or even just what organizations are running CAs).

Sure, but somebody else already did that so you can just rely on their work.

https://wiki.mozilla.org/CA/Intermediate_Certificates