...
In this example, after running the SSL Shopper Wizard the first CA of interest is StartCom which has a a free as in beer SSL certificate package called StartSSL Free.
Check CA Keys Against OS Certificate Repository
This is not a requirements but will make future maintenance easier if the CA Keys are managed and updated by the Operating System.
To determine if StartCom is part of the Ubuntu Certificate Repository,
...