Make sure you&#x27;re serving the full chain to the root CA, that might be the issue.<p>LE certs might have that issue with Java apps, since the cross-signed CA isn&#x27;t currently included in the Oracle root store (they&#x27;re working on that).