It seems the mkcert tool supports chrome and I believe Google has its own certs internally, so there's gotta be a way to do this - although it may be tied up with gsuite.