caroot: routine update
Changes:
- One (1) modified
- Eight (8) added
- One (1) expired, now untrusted
Approved by: re (cperciva)
MFC after: 3 days
(cherry picked from commit 0d3b2bdbf719ac6b5719a47387558ca9c34a4b2c)
(cherry picked from commit 9b7611d9c7b48e68f017c43ec67d4182a4bc11c4)