Stop using CertStore which is not compatible with PlzNavigate.

content/public/common/ssl_status.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SSL_STATUS_H_
 #define CONTENT_PUBLIC_COMMON_SSL_STATUS_H_
 
 #include <vector>
 
 #include "content/common/content_export.h"
 #include "content/public/common/security_style.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/sct_status_flags.h"
+#include "net/cert/x509_certificate.h"
 
 namespace net {
 class SSLInfo;
 }
 
 namespace content {
 
 // Collects the SSL information for this NavigationEntry.
 struct CONTENT_EXPORT SSLStatus {
   // Flags used for the page security content status.
@@ skipping 11 matching lines @@
     // CSS) loaded with certificate errors.
     DISPLAYED_CONTENT_WITH_CERT_ERRORS = 1 << 2,
 
     // HTTPS page containing "executed" HTTPS resources (i.e. script)
     // loaded with certificate errors.
     RAN_CONTENT_WITH_CERT_ERRORS = 1 << 3,
   };
 
   SSLStatus();
   SSLStatus(SecurityStyle security_style,
-            int cert_id,
+            scoped_refptr<net::X509Certificate> certificate,
             const net::SSLInfo& ssl_info);
   SSLStatus(const SSLStatus& other);
   ~SSLStatus();
 
   bool Equals(const SSLStatus& status) const {
     return security_style == status.security_style &&
-           cert_id == status.cert_id && cert_status == status.cert_status &&
+           !!certificate == !!status.certificate &&
+           (certificate ? certificate->Equals(status.certificate.get()) :
+               true) &&
+           cert_status == status.cert_status &&
            security_bits == status.security_bits &&
            key_exchange_info == status.key_exchange_info &&
            connection_status == status.connection_status &&
            content_status == status.content_status &&
            sct_statuses == status.sct_statuses &&
            pkp_bypassed == status.pkp_bypassed;
   }
 
   content::SecurityStyle security_style;
-  // A cert_id value of 0 indicates that it is unset or invalid.
-  int cert_id;
+  scoped_refptr<net::X509Certificate> certificate;
   net::CertStatus cert_status;
   int security_bits;
   int key_exchange_info;
   int connection_status;
   // A combination of the ContentStatusFlags above.
   int content_status;
   // The validation statuses of the Signed Certificate Timestamps (SCTs)
   // of Certificate Transparency (CT) that were served with the
   // main resource.
   std::vector<net::ct::SCTVerifyStatus> sct_statuses;
   // True if PKP was bypassed due to a local trust anchor.
   bool pkp_bypassed;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SSL_STATUS_H_