Find out which certificate authorities do not come with the system
You could use the reverse engineering method.

Here is the list of all aps that come with Mac.

So any CA you find in key chain that are not those are the one you are looking for.