Procedure to procure root CA certificate and include in cacerts of JDK

Java

only works with 7u111+ and 8u101+ as the "DST Root CA X3" was added with these versions on 2016-07-19 (see OpenJDK Log In), 8u141+ directly incldue the ISRG Root certificate (see http://www.oracle.com/technetwork/java/javase/8u141-relnotes-3720385.html20)

If you are looking at adding these manually you can do this with keytool.

Andrei