[jdk11u-dev] RFR: 8361212: Remove AffirmTrust root CAs

[Antonio Vieiro]

Mostly clean backport of [JDK-8361212](https://bugs.openjdk.org/browse/JDK-8361212) that removes the AffirmTrust CAs, that  have been deactivated by Entrust but are not being transferred to Sectigo. Mostly clean but for some `switch` statements that are not expressions in 11. This is marked as `CPU25_10-critical-SQE-OK`.

Tested on Linux/x86_64 with tier1 tests and 


==============================
Test summary
==============================
   TEST                                              TOTAL  PASS  FAIL ERROR   
   jtreg:test/jdk/sun/security                         659   659     0     0   
==============================
TEST SUCCESS

-------------

Commit messages:
 - Backport d21c6cf5986b699ec56922ebc109e176cf56733e

Changes: https://git.openjdk.org/jdk11u-dev/pull/3075/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3075&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8361212
  Stats: 504 lines in 12 files changed: 0 ins; 492 del; 12 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/3075.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3075/head:pull/3075

PR: https://git.openjdk.org/jdk11u-dev/pull/3075