You're lucky the browsers eventually relented and allowed custom root certs. That was seen as a vulnerability and almost patched.