Root keys and older systems

> You should be able to examine your root certificates in Keychain Access; the app should be able to help you identify an untrusted one.

So I've discovered what's happening with my keys, and ... I'd like to know how I update things.

I have a bunch of root keys that expire later this month, and then a lot more start expiring later this year.

I've got one, COMODO RSA Root certificate that says "This root certificate is not trusted", and that's whats been breaking some websites.

What's the best course of action for proceeding?

10.9.5.


---
Entertaining minecraft videos
http://YouTube.com/keybounce