It is mean to contain the trusted root certification authorities.

Such a file didn't exist previously on Plan 9, since the native X.509 libraries didn't handle certificate chain verification.

--
David du Colombier