RFR: 8361212: Remove AffirmTrust root CAs [v3]

[Rajan Halade]

> The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.
> 
> The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311)

Rajan Halade has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains three additional commits since the last revision:

 - Merge branch 'master' into 8361212-rmaffirm
 - 8361212: update CAInterop to remove AffirmTrust tests
 - 8361212: Remove AffirmTrust root CAs

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/26538/files
  - new: https://git.openjdk.org/jdk/pull/26538/files/6c8cb12a..c837532c

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=02
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=01-02

  Stats: 5309 lines in 192 files changed: 3347 ins; 1706 del; 256 mod
  Patch: https://git.openjdk.org/jdk/pull/26538.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26538/head:pull/26538

PR: https://git.openjdk.org/jdk/pull/26538