/etc/ssl/certs/java/ is in ca-certificates-java 20170930ubuntu1.
This file is owned by root:root, with mode 0o755.