There are 3 cacerts that are expired and should be deleted.

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/addtrustexternalca
Valid from: Tue May 30 10:48:38 GMT 2000 until: Sat May 30 10:48:38 GMT 2020

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/addtrustqualifiedca
Valid from: Tue May 30 10:44:50 GMT 2000 until: Sat May 30 10:44:50 GMT 2020

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/utnuserfirstobjectca
Valid from: Fri Jul 09 18:31:20 GMT 1999 until: Tue Jul 09 18:40:36 GMT 2019

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/geotrustglobalca
Valid from: Tue May 21 04:00:00 GMT 2002 until: Sat May 21 04:00:00 GMT 2022

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/luxtrustglobalrootca
Valid from: Thu Mar 17 09:51:37 GMT 2011 until: Wed Mar 17 09:51:37 GMT 2021

https://github.com/openjdk/jdk/blob/master/src/java.base/share/data/cacerts/quovadisrootca
Valid from: Mon Mar 19 18:33:33 GMT 2001 until: Wed Mar 17 18:33:33 GMT 2021




VerifyCACerts.java test needs to be updated as well