Comodogate & the DigiNotar fiasco have left me wondering which root CAs I can still trust. The list in my browser (firefox) is pretty long, and some of the names don't particularly inspire trust (Türktrust, AS Sertifitseerimiskeskus, Baltimore, AddTrust etc). And yet, as far as I can tell, there is no list anywhere with trust ratings or audit trails for these companies our browsers seem to trust.

Is there a way to determine which CAs are still trustworthy?