The change is to remove four AffirmTrust root certificates which are deactivated by Entrust and are not being transferred to Sectigo. These four roots are removed from cacerts truststore. Distrust of these roots is also removed as these roots will no longer be trusted by JDK by default.
The release-note is at [JDK-8364311](https://bugs.openjdk.org/browse/JDK-8364311) ------------- Commit messages: - 8361212: Remove AffirmTrust root CAs Changes: https://git.openjdk.org/jdk/pull/26538/files Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26538&range=00 Issue: https://bugs.openjdk.org/browse/JDK-8361212 Stats: 449 lines in 11 files changed: 0 ins; 437 del; 12 mod Patch: https://git.openjdk.org/jdk/pull/26538.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/26538/head:pull/26538 PR: https://git.openjdk.org/jdk/pull/26538