move cert/truststore tasks to CertificateService and ConnMgrActivity