The actual problem resulting in untrusted cert is the "extra download" certificates.