Release Android X509 chain certificate GREFs

src/libraries/Common/src/Interop/Android/System.Security.Cryptography.Native.Android/Interop.X509Chain.cs

@@ -48,9 +48,20 @@ internal static X509Certificate2[] X509ChainGetCertificates(SafeX509ChainContext
             Debug.Assert(res <= certPtrs.Length);
 
             var certs = new X509Certificate2[certPtrs.Length];
-            for (int i = 0; i < res; i++)
+            try
             {
-                certs[i] = new X509Certificate2(certPtrs[i]);
+                for (int i = 0; i < res; i++)
+                {
+                    // X509Certificate2 duplicates these JNI global refs; the native-returned refs remain caller-owned.
+                    certs[i] = new X509Certificate2(certPtrs[i]);
+                }
+            }
+            finally
+            {
+                for (int i = 0; i < res; i++)
+                {
+                    Interop.JObjectLifetime.DeleteGlobalReference(certPtrs[i]);
+                }
             }
 
             if (res == certPtrs.Length)