/etc/default/cacerts
/etc/ca-certificates/update.d/jks-keystore