Got it! Thanks for clarifying that confusing "one from column A and one from column B" GUI.

Back to the chase, though, I wonder why OS X doesn't automatically clear expired certificates, and why System Roots expired certificates can only be hidden...not deleted?

The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire