update-ca-certificates as template for a new script

make-cacert.sh will be used to create the cacerts keystore for IcedTea
Include a trusted CA list

A trusted CA list will be built using current ca-certificates-update
data.