Right, but you are warned forever* if you have a user-installed CA on your phone and you go to a site or use an app that uses that cert. At some point, it shou

Right, but you are warned forever* if you have a user-installed CA on your phone and you go to a site or use an app that uses that cert. At some point, it should recognize that you've continued using the cert XX times or for XX days or both and stop trying to guilt you into removing it via the use of some illusory 'you might be insecure' bogeyman, when Symantec, an already 'trusted' CA, could issue any cert for any site and you'd have no recourse or ability to tell if they should have. Everyone 'might be insecure', that's just how it works. *Maybe this goes away at some point months down the line, but it's at least 30 days and has to be some number in the 1000s of uses if the warning eventually quenches.