I believe it just uses your systems rootstore. So adding the signer cert in there should probably be enough.

Ah, that's right, Chrom* based things look at the system store by default and it's the Firefox based things that don't (without configuration at least). Thanks.

Edit: and that reminds me I should probably run this test on new Teams, where it now uses the built in WebView2