https://docs.oracle.com/en/java/javase/17/docs/specs/man/keytool.html has

```
The cacerts file represents a system-wide keystore with CA certificates. System administrators can configure and manage that file with the keytool command by specifying jks as the keystore type. The cacerts keystore file ships with a default set of root CA certificates. For Linux, OS X, and Windows, you can list the default certificates with the following command:

keytool -list -cacerts

The initial password of the cacerts keystore file is changeit. System administrators should change that password and the default access permission of that file upon installing the SDK.
```

This needs to be updated.