RFR: 8361212: Remove AffirmTrust root CAs

Tue Jul 29 19:45:29 UTC 2025

The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.

The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311)

-------------

Commit messages:
 - 8361212: Remove AffirmTrust root CAs

Changes: https://git.openjdk.org/jdk/pull/26538/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8361212
  Stats: 449 lines in 11 files changed: 0 ins; 437 del; 12 mod
  Patch: https://git.openjdk.org/jdk/pull/26538.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26538/head:pull/26538

PR: https://git.openjdk.org/jdk/pull/26538