This example site shows that simply deleting the DigiNotar root certificates isn't enough, because they also are a subordinate CA. You should also delete the 'Staat der Nederlanden Root CA'.

And when they come to seize your hardware, they will simply leave your for personal use equipment alone, because you told them that it hasn't been used for illegal activities.

Enable IPv6 and use these free ones:
http://www.sixxs.net/misc/coolstuff/#newsservers

The Nano has been available for a while now, but the (64-bit) Linux kernel still doesn't support the crypto accelerator and random number generator.
I recently bought a Nano based Jetway board and had add crypto and rng support myself. It's mostly working now, but I'm waiting for VIA documentation to do things the right way.