private static SSLContext createIdentitySslContext(AutoReloadingX509KeyManager keyManager, Path trustStoreFile) {
        List<X509Certificate> defaultTrustStore;
        try {
            // load the default java trust store and extract the certificates
            defaultTrustStore = Stream.of(TrustManagerUtils.createDefaultX509TrustManager().getAcceptedIssuers()).toList();
        } catch (Exception e) {
            throw new RuntimeException("Failed to load default trust store", e);
        }
        try {
            List<X509Certificate> caCertList = Stream.concat(
                            X509CertificateUtils.certificateListFromPem(new String(Files.readAllBytes(trustStoreFile))).stream(),
                            defaultTrustStore.stream())
                    .toList();
            return new SslContextBuilder()
                    .withTrustStore(caCertList)
                    .withKeyManager(keyManager)
                    .build();
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
    }
Create an SSL context with the given trust store and the key manager from this provider.
Include default trust store

@param keyManager the key manager
@param trustStoreFile the trust store file
vespa-athenz/src/main/java/com/yahoo/vespa/athenz/identity/SiaIdentityProvider.java