Dell
I have had fairly decent luck with our Dell fleet accepting the new certificate. With exception of the Optiplex 5000s that are being particularly resistant and will not update the registry when the command is given.