MoveCertificate is a Magisk/KernelSU/APatch module that moves user-installed CA certificates into the Android system certificate store, making them trusted system-wide. It supports Android versions 7 through 16 and provides two mounting modes: compatible (using tmpfs bind mounts) and builtin (leveraging Magisk Magic Mount). The module runs during boot via `post-fs-data.sh`, copying certificates from user directories and custom locations into system directories. It includes a web-based management UI (built with TypeScript, esbuild, and KernelSU WebUI) that allows users to view installed certificates, check module version, toggle modes, and delete certificates. The shell scripts handle permission fixing, SELinux context preservation, and compatibility cleanup (e.g., AdGuard certificates). The project is well-structured, with clear separation between shell logic and the web frontend, internationalization support, and a custom build pipeline.