[usrnm]

Not really. That's still something the owner of the domain has to do. What I'm talking about is a setting in the browser that lets me as a user decide what root certificates I want to trust and for what. Why can't I do that?