[locusofself]

if it's a limited number of Root CA certs that are not supported, you can likely install those manually.