script to extract CAs from JAVA keystores