Integrated: 8361212: Remove AffirmTrust root CAs

[Rajan Halade]

On Tue, 29 Jul 2025 19:39:44 GMT, Rajan Halade <rhalade at openjdk.org> wrote:

> The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.
> 
> The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311)

This pull request has now been integrated.

Changeset: 3bdac531
Author:    Rajan Halade <rhalade at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/3bdac5317815b84d6f693d972f73d77dd069a891
Stats:     507 lines in 12 files changed: 0 ins; 495 del; 12 mod

8361212: Remove AffirmTrust root CAs

Reviewed-by: mullan

-------------

PR: https://git.openjdk.org/jdk/pull/26538