Unable to verify first certificate using sun java system application server

I can explain a little of what you see but I don't know java server coding well enough to advise. You might be better off asking on a programming forum.

But, as for why Chrome works and others fail ...

Your Java server is only sending a leaf certificate.

Chrome has likely seen and cached the intermediate so can authenticate the cert. Browsers work very hard to adapt to wrongly configured servers.

You can see the "raw" cert your server sends with a tool like below.

If using the java keystore make sure you converted the fullchain.pem properly

4 Likes