1 Each file in this directory (except for this README) contains a CA certificate in PEM format. It can be generated with

     2 

     3 keytool -J-Duser.timezone=GMT -printcert -file ca.cert | sed -n '1,4p;8,10p'

     4 keytool -printcert -file ca.cert -rfc

     5 

     6 Please note the textual part before the "-----BEGIN CERTIFICATE-----" line is just a suggestion and not arbitrary.

     7 

     8 After any change in this directory, please remember to update the content of `test/jdk/sun/security/lib/cacerts/VerifyCACerts.java` as well.

     9 

    10 All changes to this directory need to be approved by the Security group.