There's a lot of software that sucks at dealing with internal CAs. It's a pain in the ass. Even where there is a single, central store like on Windows, applicat

There's a lot of software that sucks at dealing with internal CAs. It's a pain in the ass. Even where there is a single, central store like on Windows, applications will decide they'd rather use their own certificate bundle.