at this point is external certificate trusted... if trusted then only we should store in external else please store in untrusted list