Thanks eschwartz for pointed me to /usr/java/lib/security for the cacerts file.
I just looked at the Amazon update file for the DXG to the 2.5.8 with the 09 unit:
Code:
-rw-r--r-- 1 1001 1001 53385 Feb 10 2011 550650009-555370010.ffs
-rw-rw-rw- 1 1001 1001 128 Feb 10 2011 550650009-555370010.ffs.sig
-rw-r--r-- 1 1001 1001 53398 Jan 13 2011 rootfs_md5_list.tar.gz
-rw-rw-rw- 1 1001 1001 128 Feb 10 2011 rootfs_md5_list.tar.gz.sig
-rw-r--r-- 1 1001 1001 372 Feb 10 2011 update-09-550650009-555370010.dat
-rw-rw-rw- 1 1001 1001 128 Feb 10 2011 update-09-550650009-555370010.dat.sig
-rw-r--r-- 1 1001 1001 66524 Jan 13 2011 update-bootloader.tar.gz
-rw-rw-rw- 1 1001 1001 128 Feb 10 2011 update-bootloader.tar.gz.sig
-rw-r--r-- 1 1001 1001 96964 Jan 13 2011 update-patches.tar.gz
-rw-rw-rw- 1 1001 1001 128 Feb 10 2011 update-patches.tar.gz.sig
They show the last update for the DXG was created in Jan and Feb 2011.
The current Amazon update page leaves the DXG at 2.5.8 build 555370010 and still requires the critical OTA update to pass the March 2016 server changes. I wonder if the build number will change after the OTA update.
Maybe 04 is not the same as 09?