Yes, open that site in a browser, view certificate, view certification path, and there you should find the CAs that must be trusted. In my case, I had 3 corporate CAs related to proxy that I had to add to java keystore. It is very important that you do this for the SAME java install that your local ...