Merge "Add API for checking which CA certs were installed by the DO/PO"