While I've no experience with these trust certificates, after a few searches have some general idea.
• When you shouldn't trust a trusted root certificate | Malwarebytes Labs

https://blog.malwarebytes.com/security-world/technology/2017/11/when-you-shouldnt-trust-a-trusted-root-certificate/
The example within the above specifically cites 'baltimore cyber trust certificates' although
appear to drift into Windows territory; these would have an Apple Mac similarity, to Remove.
And parts of the above article suggests the same kind of malevolent problem you've faced.
Some research into this aspect may allow you to either backup from clean archives; or
get rid of the issue in some other method. While I have no idea exactly how to do this!
• Fix persistent invalid certificate errors in OS X | Macissues
https://www.macissues.com/2015/09/10/fix-persistent-invalid-certificate-errors/
This on the other hand, goes into details; mostly bits that touch upon 'reset keychain'
and there may be means toward learning the 'system roots and removing certificates
that probably are the problem. However I don't know enough to advise one in these.
So I'm not certain if this has any relevancy except for clues on where to look further.
And sorry to not be of help; but I do see possible paths to resolving this matter..
Perhaps this may yield other input from additional persons with better ideas?
Take care & good luck!🌤🌻