Adds `chrome` as a new certificate store option alongside `mozilla`. Both stores filter out China-based CA certificates.