Update CA Certs

[eclipse-temurin-bot]

See details in the Meta Bug linked from the Root Cert Inclusions into Mozilla Product Releases section of https://wiki.mozilla.org/NSS:Release_Versions

[github-actions]

Thank you for creating a pull request!
If you have not done so already, please familiarise yourself with our Contributing Guidelines and FAQ, even if you have contributed to the Adoptium project before. GitHub actions will now run a set of jobs against your PR that will lint and unit test your changes. Keep an eye out for the results from these on the latest commit you submitted. For more information, please see our testing documentation.

[karianna]

of certs in smoke test will also need changing.

[github-actions]

A block has been put on this Pull Request as this repository is temporarily under a code freeze due to an ongoing release cycle.

If this pull request needs to be merged during the release cycle then please comment /merge and a PMC member will be able to remove the block.

If the code freeze is over you can remove this block by commenting /thaw.

[karianna]

/merge

[github-actions]

Approval to merge during the lockdown cycle

Please can two Adoptium PMC members comment /approve?

[karianna]

/approve

[smlambert]

/approve

Thank you @karianna and @smlambert for your approvals, this pull request is now approved to merge during release.

[tellison]

For the record, and future Temurin release notes, the changes are described in NSS issue [meta] February 2024 Batch of Root Changes.

In summary:
Removals
Remove Expired SECOM Root - Bug #1865450

Additions
Add D-Trust S/MIME Roots - TBD (CA Program Bug # 1781510)
Add Deutsche Telekom Roots - TBD (CA Program Bug # 1820592)