RFR: 8361212: Remove AffirmTrust root CAs [v2]

[Rajan Halade]

> The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.
> 
> The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311)

Rajan Halade has updated the pull request incrementally with one additional commit since the last revision:

  8361212: update CAInterop to remove AffirmTrust tests

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/26538/files
  - new: https://git.openjdk.org/jdk/pull/26538/files/3b91b625..6c8cb12a

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=00-01

  Stats: 58 lines in 1 file changed: 0 ins; 58 del; 0 mod
  Patch: https://git.openjdk.org/jdk/pull/26538.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26538/head:pull/26538

PR: https://git.openjdk.org/jdk/pull/26538