Originally posted by Magnius
You're supposed to ONLY replace CA27. That's what worked for me. If you have a backup of the original CA24, then i suggest you copy it over the modded one in dev_flash rw.
If you know what you are doing, you know that it does not matter.
You may overwrite ca05, ca24, ca27, ca34 and ca37 with the cert that came with charles or f...psn.
In case you do, you have to proxy ALL ssl connections
Most important thing is not to mix the certs from charles with those from f...psn
And if you want to be 100% sure, make your own certs