The issue with that solution is that it will treat such certificates as essentially self-signed. This means that it will essentially blocks access to sites. I want a softer approach. Say one that strikes through the https in the URL.

Essentially I am looking to be told about certificates signed by certain CAs without them actually interfering with my browsing. Kinda like this: https://chrome.google.com/webstore/detail/tlsa-validator/gmg...