Add a root certificate to OpenJDK v1.70 cacerts
Root certificates should be added to the machine configuration. The cacerts file linked to a machine cacerts which is updated by 'update-ca-trust'
Get the certificate (PEM format):
$ wget http://www.startssl.com/certs/ca.pem
Copy the certificate to the anchors directory and run update-ca-trust:
# cp ca.pem /etc/pki/ca-trust/source/anchors/
# update-ca-trust extract