title: Android app storing client certificates in a secure and proper way
body: <p>I am building an Android application that will need Certificate based authentication. I'm not so familiar with Java/Kotlin programming paradigms. </p>
  
  <p>The certificates will be issued one of two ways, via an API (which I control) or via a Device Management tool such as MobiControl (this is the only one, currently, but we may have to use other device management tools). </p>
  
  <p>I need a way to store the certificates securely, but in a way that we can deploy them automatically using a Device Management suite and they will persist indefinitely. Is the certificate store sufficient? <a href="https://developer.android.com/reference/java/security/cert/CertStore" rel="nofollow noreferrer">https://developer.android.com/reference/java/security/cert/CertStore</a></p>
  
  <p>In unix, I'd store them in <code>/etc/ssl/certs</code> but I don't know if this is a valid Android approach. </p>