[rm trusts/*.jks]: remove cacert from my win8 and splitup debian

(jks-files will be automatially regenerated on first access of trust
overview page)
Point out self-signed certificates.