Example only — provider names/order vary by Android image and Google Play Services version.

=== BEFORE ProviderInstaller ===
[0] AndroidNSSP
[1] AndroidOpenSSL
[2] CertPathProvider
[3] AndroidKeyStoreBCWorkaround
[4] BC
[5] HarmonyJSSE
[6] AndroidKeyStore

=== AFTER ProviderInstaller ===
[0] GmsCore_OpenSSL
[1] AndroidNSSP
[2] AndroidOpenSSL
[3] CertPathProvider
[4] AndroidKeyStoreBCWorkaround
[5] BC
[6] HarmonyJSSE
[7] AndroidKeyStore

Diagnostic interpretation:
ProviderInstaller inserted GmsCore_OpenSSL at the highest priority. If a TLS failure begins only in this state, test causality with a controlled runtime bypass rather than assuming certificate pinning.
