You should not have to disable any of them. All the affected certificates have likely been revoked by now, and any modern web browser/application will pull the Certificate Revocation List (CRL) and know to not trust them.

Source: Former IT Engineer

Lets be real, the shareholders controlling these corporations would just hire another monkey to do their bidding.

Based on your comment history, you need a therapist.

Wait, actually?