Interestingly, I cannot get round of CNNIC, as I am likely to operate some services for my employer on Windows Azure in China.

http://www.cnnic.cn/jczyfw/fwqzs/fwqzsdtgg/201403/t20140312_...

Microsoft is using CNNIC certs for their Windows Azure services in China (, which of course is independent from Azure services in other regions, and is jointly operated with Chinese partners).

If I marked CNNIC CA as untrustworthy, I would be expecting some alert in my Dashboard page, I guess.