Do pacman and chrome rely on ca-certificates package to provide root certificates?

I am assuming pacman uses curl underneath which relies on ca-certificates to do address verification, is that right?

Does chrome ship with its own ca certificates db or does it also rely on curl which eventually relies on ca-certificates? From pactree chrome does seem to depend on curl, but I am not sure that is the only way chrome accesses certificates.