I did not realize at all that Electron apps use their own internal cert store. I'd never have guessed, because what an insane design decision, but geez here we are I guess.