Remove old CAs

This matches that in java_installer
644ef2459bd0700d7b33df3c2141b62c2fa4e74c