zomg on my primary device:

locate cacert.pem | xargs grep -l 'emSign.*G3' | wc -l

returns 92, mostly in python virtualenvs. what a cancer.