RFR: 8361212: Remove AffirmTrust root CAs [v2]

[Sean Mullan]

On Tue, 29 Jul 2025 19:51:35 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

>> The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.
>> 
>> The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311)
>
> Rajan Halade has updated the pull request incrementally with one additional commit since the last revision:
> 
>   8361212: update CAInterop to remove AffirmTrust tests

Fix and RN looks good.

-------------

Marked as reviewed by mullan (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/26538#pullrequestreview-3071375905