Notable change is the inclusion of Let's Encrypt CA.
Submitted by: Brian Gardner <openjdk@getsnappy.com> (preliminary version)