Add New D-Trust Server Certificate Root CAs

[hhund]

D-Trust is signing browser excepted server certificates from new issuing / root certificates. We need to add two new root CAs:

• D-TRUST BR Root CA 1 2020 (ECC): https://crt.sh/?id=3699642382
• D-TRUST BR Root CA 2 2023 (RSA): https://crt.sh/?id=9609658147

Until this change is rolled out to all communication partners, organizations with new D-Trust server certificates need to make sure that the server certificate chain includes (ends with) variants of theses "root" certificates cross-signed by the old root CA: D-TRUST Root Class 3 CA 2 2009.

• D-TRUST BR Root CA 1 2020 (ECC) signed by D-TRUST Root Class 3 CA 2 2009: https://crt.sh/?id=19754747817
• D-TRUST BR Root CA 2 2023 (RSA) signed by D-TRUST Root Class 3 CA 2 2009: https://crt.sh/?id=19754898942