JDK-8355325 : Release Note: Removed Two Camerfirma Root Certificates
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version:
    7u471,8u461,11.0.28-oracle,17.0.16-oracle,21.0.8-oracle,24.0.2,25 7u471,8u461,11.0.28-oracle,17.0.16-oracle,21.0.8-oracle,24.0.2,25
  • Priority: P4
  • Status: Resolved
  • Resolution: Delivered
  • Submitted: 2025-04-22
  • Updated: 2025-05-21
  • Resolved: 2025-04-30
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17 JDK 21 JDK 24 JDK 25 JDK 7 JDK 8
11.0.28-oracleResolved 17.0.16-oracleResolved 21.0.8-oracleResolved 24.0.2Resolved 25Resolved 7u471Resolved 8u461Resolved
Description
The following root certificates, which are terminated and no longer in use, have been removed from the `cacerts` keystore:
```
+ alias name "camerfirmachamberscommerceca [jdk]"
  Distinguished Name: CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU

+ alias name "camerfirmachambersignca [jdk]"
  Distinguished Name: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU

```