forked from https://android.googlesource.com/platform/packages/apps/CertInstaller