@Override
    public X509Certificate[] getAcceptedIssuers() {
        return (acceptedIssuers != null) ? acceptedIssuers.clone() : acceptedIssuers(rootKeyStore);
    }
Check the trustedCertificateIndex for the cert to see if it is
already trusted and failing that check the KeyStore if it is
available.
common/src/main/java/org/conscrypt/TrustManagerImpl.java