JEP 319 added the majority of root certificates to JDK 10, but there are still a few remaining.

Each CA must must sign the Oracle Contributor Agreement (OCA) or an equivalent agreement that permits Oracle broad open sourcing rights of the roots before the certificates can be included. Those that do not sign an agreement will not be included.