Starting with the release of Java 10, there is a default set of Certification Authority (CA) certificates as part of the JDK. The JDK's cacerts and keystore prior to Java 10, did not contain a set of certificates. Prior to this Java release, developers were required to create and configure a set of root certificates for cacerts and keystore.
Now, the Java platform includes a set of root certificates in cacerts and keystore, issued by Oracle. The specific CA is part of the Java SE Root CA program.
As of Java 10, the following CAs, authenticated by Oracle, are included in the root certificates:
- Actalis S.p.A.
- Buypass AS
- Camerfirma
- Certum
- Chunghwa Telecom Co., Ltd.
- Comodo CA Ltd.
- Digicert Inc.
- DocuSign
- D-TRUST GmbH
- IdenTrust
- Let's Encrypt
- LuxTrust
- QuoVadis Ltd.
- Secom Trust Systems
- SwissSign AG
- Tella
- Trustwave
It is likely that additional CAs will be...
