Next guess I have is the certificates are not read from cert store, but that Nokia has hard-coded them in the closed binary blob. That would mean we will never get a solution (or someone will disassemble and put new certs or make it read from cert store). Again, just a guess...