I would like to verify a hardware-backed key pair in my Java backend service.
According to the Verifying hardware-backed key pairs with Key Attestation page, I need to verify the attestation object against the Google Root Certificates list.
I don't want to hardcode this list in my codebase as it makes it less flexible and I'd have to keep it up to date manually.
Is there an endpoint to fetch this list dynamically? I see a similar endpoint for the Certificate Revocation Status List