This is just how root certificates work no? The assumption that the Russians will abuse this is just as valid for any US company, given what we know form the Snowden leaks.

Thank you, I think it did not like the syntax I had when uncommenting all working now :)

Thanks, will take a look a my setup

They can do what they like! I like it here better