anchor.diff:      with subtest("Unknown CA is untrusted in curl"):
           machine.fail("curl -fv https://bad.example.com")
   
  -    browsers = [
  +    browsers = {
         # Firefox was disabled here, because we needed to disable p11-kit support in nss,
         # which is why it will not use the system certificate store for the time being.
  -      # "firefox",
  -      "chromium",
  -      "falkon",
  -      "midori"
  -    ]
  -    errors = ["Security Risk", "not private", "Certificate Error", "Security"]
  +      #"firefox": "Security Risk",
  +      "chromium": "not private",
  +      "qutebrowser -T": "Certificate error",
  +      "midori": "Security"
  +    }
   
       machine.wait_for_x()
  -    for browser, error in zip(browsers, errors):
  +    for command, error in browsers.items():
  +        browser = command.split()[0]
           with subtest("Good certificate is trusted in " + browser):
               execute_as(
  -                "alice", f"env P11_KIT_DEBUG=trust {browser} https://good.example.com & >&2"
  +                "alice", f"env P11_KIT_DEBUG=trust {command} https://good.example.com & >&2"
               )
               wait_for_window_as("alice", browser)
               machine.wait_for_text("It works!")
  
positive.code:         # which is why it will not use the system certificate store for the time being.
          # firefox
          chromium
          falkon
          midori
        ];
      };
  
negative.code:             execute_as("alice", "xdotool key ctrl+w")  # close tab
  
          with subtest("Unknown CA is untrusted in " + browser):
              execute_as("alice", f"{command} https://bad.example.com & >&2")
              machine.wait_for_text(error)
              machine.screenshot("bad" + browser)
              machine.succeed("pkill " + browser)
  