If you have a Certificate Authority in your trust store, than any certificate signed by that CS is trusted by your system.

That is why Google uses key pinning for their services and a list is hardcoded in Chrome, AFAIK.