2 ms·

OK, but you could also just run "dpkg-reconfigure ca-certificates" or use Keychain Access to mark undesirable authorities "Do Not Trust".