caroot: routine update

Changes:
- One (1) modified
- Eight (8) added
- One (1) expired, now untrusted

MFC after: 3 days