[11u] RFR: 8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs

[Severin Gehwolf]

Please review this test-only backport which adds QuoVadis and LuxTrust
certificate to the allowed but soon-to-expire list. The JDK 17 patch
didn't apply cleanly since 11 is missing JDK-8243559. It's not clear at
this point when we'll include it in JDK 11. I've ported the changes
manually.

The patch will resolve 11 backports for both JDK-8225072 and JDK-
8258630.

Bug(s): https://bugs.openjdk.java.net/browse/JDK-8225072
        https://bugs.openjdk.java.net/browse/JDK-8258630
webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-8225072/01/webrev/

Testing: VerifyCACerts test fails before and passes after.

Thoughts?

Thanks,
Severin