diff --git a/src/core/ksslcertificatemanager.h b/src/core/ksslcertificatemanager.h
--- a/src/core/ksslcertificatemanager.h
+++ b/src/core/ksslcertificatemanager.h
@@ -60,6 +60,7 @@
 };
 
 //### document this too... :/
+/** Certificate manager. */
 class KIOCORE_EXPORT KSslCertificateManager
 {
 public:
@@ -79,8 +80,15 @@
 
     QList<QSslCertificate> caCertificates() const;
 
-    static QList<KSslError> nonIgnorableErrors(const QList<KSslError> &);
-    static QList<KSslError::Error> nonIgnorableErrors(const QList<KSslError::Error> &);
+    /** @deprecated since 5.64, use the corresponding QSslError variant. */
+    static KIOCORE_DEPRECATED QList<KSslError> nonIgnorableErrors(const QList<KSslError> &);
+    /** @deprecated since 5.64, use the corresponding QSslError variant. */
+    static KIOCORE_DEPRECATED QList<KSslError::Error> nonIgnorableErrors(const QList<KSslError::Error> &);
+    /**
+     * Returns the subset of @p errors that cannot be ignored, ie. that is considered fatal.
+     * @since 5.64
+     */
+    static QList<QSslError> nonIgnorableErrors(const QList<QSslError> &errors);
 
 private:
     friend class KSslCertificateManagerContainer;
diff --git a/src/core/ksslcertificatemanager.cpp b/src/core/ksslcertificatemanager.cpp
--- a/src/core/ksslcertificatemanager.cpp
+++ b/src/core/ksslcertificatemanager.cpp
@@ -485,6 +485,13 @@
     return ret;
 }
 
+QList<QSslError> KSslCertificateManager::nonIgnorableErrors(const QList<QSslError> &errors)
+{
+    Q_UNUSED(errors)
+    // ### add filtering here...
+    return {};
+}
+
 QList<KSslCaCertificate> _allKsslCaCertificates(KSslCertificateManager *cm)
 {
     return KSslCertificateManagerPrivate::get(cm)->allCertificates();