ca-certificates-java: some fixes