Ask HN: Cleaning trusted SSL certificates

After reading about google potentially untrusting symantec certs I was wondering if anyone has a recommend method to cleanup my local trusts?

does a SSL extraordinaire exist that has removed many 'default' trusted certificates on github or otherwise?