> Users are given a choice whether or not to use the product.

What did this choice look like? Were users prompted to remove the cert if they didn't want it?