Click the "Download Root Certificate" button on ca.triumf.ca
The certificate should have the following fingerprints:
SHA1: 0C:CA:3D:69:78:81:15:48:75:53:65:8A:D9:24:30:3A:90:EA:32:F9
MD5: 8C:70:20:D5:46:39:4E:4F:B8:54:01:F7:0B:58:7E:B8
(The policy for this certificate is that it is only issued to legitimate TRIUMF sites by TRIUMF Computing Services)
(If you ever need to remove this certificate, or change the trust settings, it is in the "login" keychains in the Mac keychains tool on the toolbar)