The Starfield Services Root Certificate Authority - G2 root should be added to OpenJDK. This root is owned by Amazon. Alias is starfieldservicesrootg2ca