Untrusting an intermediate CA on OS X
blog.filippo.io