Comment by stephbook

Indeed. But the Java keystore and the Firefox/Chrome/VSCode NSSDB and whatever Python is shipping this week aren't really better.

I wonder what's so annoying about OS certs.