Normal
Yes, of course... I still don't know exactly what means that status (Trusted but Not Approved) for the Certificate status in KSN; but We know that in Intrusion Prevention defaults rules, that status usually leads the app will be placed in Low Restricted group.