You should not have to disable any of them. All the affected certificates have likely been revoked by now, and any modern web browser/application will pull the Certificate Revocation List (CRL) and know to not trust them.
Source: Former IT Engineer
You should not have to disable any of them. All the affected certificates have likely been revoked by now, and any modern web browser/application will pull the Certificate Revocation List (CRL) and know to not trust them.
Source: Former IT Engineer