It is mean to contain the trusted root certification authorities.
Such a file didn't exist previously on Plan 9, since the native X.509 libraries didn't handle certificate chain verification.
-- David du Colombier