https ca cert database in efi signature list format

Copied over from centos stream 9 where this is available as
/etc/pki/ca-trust/extracted/edk2/cacerts.bin

It's the Mozilla Foundation CA certificate list, shipped in
ca-certificates.rpm, licensed as "MIT AND GPL-2.0-or-later".