Fixes #44761

Thanks @cescoffier for thinking about supporting creating chains, it was very easy for me to reuse the code.
I ended up using KeyStore API directly to insert certificate entries, as it is the only material that has to be inserted, but i did not hesitate to borrow the working code block for it from `CaGenerator` .