[revelation]

For a properly engineered mobile app there are only downsides to using the public CA system (and thereby the devices CA store). So that would not work.