JAVA CA store on OS X

To get the list of CAs trusted by Java on OS X:

keytool -v -list -keystore /System/Library/Java/Support/CoreDeploy.bundle/Contents/Home/lib/security/cacerts

The default password is 'changeit'.