IdenTrust's DST Root CA X3 was actually added to Java's trust store since this thread was started.
Java: only works with 7u111+ and 8u101+ as the "DST Root CA X3" was added with these versions on 2016-07-19 (see OpenJDK Log In)
Edit: I missed the line where pfg said this 18 hours ago. 