RFR: 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs [v2]

[Mark Powers]

> [JDK-8346587](https://bugs.openjdk.org/browse/JDK-8346587)

Mark Powers has updated the pull request incrementally with one additional commit since the last revision:

  comments from Sean

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/22985/files
  - new: https://git.openjdk.org/jdk/pull/22985/files/c69f7c8b..f48063fa

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=22985&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=22985&range=00-01

  Stats: 33 lines in 5 files changed: 32 ins; 0 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/22985.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/22985/head:pull/22985

PR: https://git.openjdk.org/jdk/pull/22985