For those of you that wish to ensure your Macs never trust these amateurs ever again:

* Applications -> Utilities -> Keychain Access

* Select System Roots on the top bar, then Certificates on the bottom one

* Double click on the 3 StartCom certificates in the list, and flag them as "Never Trust".

Verify by trying to access https://startssl.com