[jdk23u] RFR: 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs

[Prajwal Kumaraswamy]

This is a clean backport.
Internal tests are green and related jck tests are green as well

-------------

Commit messages:
 - Backport bbb516163d400a9c7e923e423fe2a60091b59322

Changes: https://git.openjdk.org/jdk23u/pull/91/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk23u&pr=91&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8337664
  Stats: 1103 lines in 13 files changed: 1101 ins; 0 del; 2 mod
  Patch: https://git.openjdk.org/jdk23u/pull/91.diff
  Fetch: git fetch https://git.openjdk.org/jdk23u.git pull/91/head:pull/91

PR: https://git.openjdk.org/jdk23u/pull/91