Make CertificateProviderService vend ClientCertIdentities directly.

chrome/browser/certificate_manager_model.h

Index: chrome/browser/certificate_manager_model.h
diff --git a/chrome/browser/certificate_manager_model.h b/chrome/browser/certificate_manager_model.h
index 434ad2dddff091cc302f866b88f0a1d2853a9633..191ab876531879ac4661d3d6384775c572218acc 100644
--- a/chrome/browser/certificate_manager_model.h
+++ b/chrome/browser/certificate_manager_model.h
@@ -15,6 +15,7 @@
 #include "base/memory/weak_ptr.h"
 #include "base/strings/string16.h"
 #include "net/cert/nss_cert_database.h"
+#include "net/ssl/client_cert_identity.h"
 
 namespace chromeos {
 class CertificateProvider;
@@ -170,7 +171,8 @@ class CertificateManagerModel {
   void RefreshSlotsUnlocked();
 
   // Callback used to refresh extension provided certificates. Refreshes UI.
-  void RefreshExtensionCertificates(const net::CertificateList& new_certs);
+  void RefreshExtensionCertificates(
+      net::ClientCertIdentityList new_cert_identities);
 
   net::NSSCertDatabase* cert_db_;
   net::CertificateList cert_list_;