Salesforce Apex rejects certificate: unable to find valid certification path to requested target

@_az Thank you, that solved my issue!

For other readers that may be interested, when generating a JKS for my HTTPS Java server, I had to use fullchain.pem rather than cert.pem (both provided by Let’s Encrypt/Certbot).