James58899 says to YSITD https://security.googleblog.com/2018/03/distrust-of-symantec-pki-immediate.html