Instead of relying on hardcoded webpki certificates, we should use rustls_platform_verifier.
For ohos specifically, this would require first adding ohos support to rustls_platform_verifier.
The relevant C-APIs header files on OpenHarmony can be found at network/netstack/netssl in the SDK.