Updating the JS / Coherent GT trust store

Recently I noticed SSL connect errors in the Coherent GT debugger like these:

In this example the failing requests are made via JS fetch() as part of the HPG mission system SDK which is shipped with the H145.

The server certificate for domain routing.openstreetmap.de has been recently updated and issued by the LetsEncrypt E8 CA ( http://e8.i.lencr.org/). This CA is trusted by every major browser - how can this be added to the JS/Coherent GT trust store so that these requests will go through securely?

A proxy? We’re already on the latest build of CoherentGT available at this point I believe…

Thanks, but a proxy is not feasible for many reasons (e.g. package distribution, no access to un-obfuscated JS source code etc.).

How/where is the trust store even configured? Is it hardcoded into the core engine?