These certificates are trusted and thus make up an anchor for a certificate
chain.  Note that only DER encoded certificates with a suffix of
".crt" or ".der" are used.  They are loded at dirmngr startup.