JTREG tests verifying the cacerts certificate store are in these folders:

jdk/test/security/infra/java/security/cert/CertPathValidator
jdk/test/sun/security/lib/cacerts

Since there are frequent, test failures in those files we should add them to the tier1 GHA test set for 8u so as to get a heads-up when a certificate expires or to notice some other test issue such as JDK-8271838 or JDK-8309088.