The section on cacerts also left me confused. No individual is likely to want to go to the trouble of
getting permissions from the CA’s. So I expect most people would just leave the file unpopulated.
The sentence “Failure to provide a populated cacerts file will result in verification of a certificate
chain during runtime.” Is presumably intended to say “verification failure”?

---

This section of the document is confusing.