/etc/ca-certificates/update.d/jks-keystore
/etc/default/cacerts