Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8213846

OpenJDK 8 Cannot Retrieve HTTPS Web Content From Web Service Using TLSv1

    Details

      Description

      ADDITIONAL SYSTEM INFORMATION :
      Windows 10. OpenJDK 1.8.0.1.8.1-1.

      A DESCRIPTION OF THE PROBLEM :
      I'm trying to test whether a Java 1.6 web service client can compile and run under OpenJDK 1.8.0.181-1 using Maven. When trying to retrieve the WSDL, the service uses only support the TLSv1 protocol.

      Maven tries to retrieve the WSDL, and errors out with the following exception.

      I've manage to isolate the issue in the attached test class.

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      Run the attached code with the following VM option settings:

      -Djavax.net.debug=ssl,handshake
      -Dhttps.protocols=TLSv1
      -Djdk.tls.client.protocols=TLSv1




      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      The code should print out the WSDL
      ACTUAL -

      --- exec-maven-plugin:1.2.1:exec (default-cli) @ openjdk8-tls1-test ---
      Ignoring disabled cipher suite: SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
      Ignoring disabled cipher suite: SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_KRB5_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
      Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_KRB5_WITH_3DES_EDE_CBC_MD5
      Ignoring disabled cipher suite: SSL_DH_anon_WITH_RC4_128_MD5
      Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_SHA
      Ignoring disabled cipher suite: SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
      Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_RSA_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
      Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_MD5
      Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_MD5
      Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
      Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
      Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_MD5
      Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
      Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
      Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
      Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
      Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256
      Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
      Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
      Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_128_CBC_SHA256
      Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
      Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_128_GCM_SHA256
      Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_GCM_SHA384
      Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
      Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
      Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
      Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
      Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
      Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
      Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      trustStore is: C:\Programs\Java\java-1.8.0-openjdk-1.8.0.181-1\jre\lib\security\cacerts
      trustStore type is : jks
      trustStore provider is :
      init truststore
      adding as trusted cert:
        Subject: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
        Issuer: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
        Algorithm: RSA; Serial number: 0x3e8
        Valid from Thu May 15 01:13:14 EDT 2003 until Mon May 15 00:52:29 EDT 2023

      adding as trusted cert:
        Subject: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
        Issuer: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
        Algorithm: RSA; Serial number: 0xcf08e5c0816a5ad427ff0eb271859d0
        Valid from Tue Nov 07 14:31:18 EST 2006 until Mon Dec 31 14:40:55 EST 2029

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Algorithm: EC; Serial number: 0xa68b79290000000050d091f9
        Valid from Tue Dec 18 10:25:36 EST 2012 until Fri Dec 18 10:55:36 EST 2037

      adding as trusted cert:
        Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x83be056904246b1a1756ac95991c74a
        Valid from Thu Nov 09 19:00:00 EST 2006 until Sun Nov 09 19:00:00 EST 2031

      adding as trusted cert:
        Subject: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
        Issuer: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Sep 30 00:20:49 EDT 2003 until Sat Sep 30 00:20:49 EDT 2023

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x445734245b81899b35f2ceb82b3b5ba726f07528
        Valid from Thu Jan 12 13:59:32 EST 2012 until Sun Jan 12 13:59:32 EST 2042

      adding as trusted cert:
        Subject: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
        Issuer: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jul 07 06:11:21 EDT 2015 until Sat Jun 30 06:11:21 EDT 2040

      adding as trusted cert:
        Subject: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x59b1b579e8e2132e23907bda777755c
        Valid from Thu Aug 01 08:00:00 EDT 2013 until Fri Jan 15 07:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
        Issuer: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
        Algorithm: EC; Serial number: 0x0
        Valid from Tue Jul 07 06:37:12 EDT 2015 until Sat Jun 30 06:37:12 EDT 2040

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x18acb56afd69b6153a636cafdafac4a1
        Valid from Sun Nov 26 19:00:00 EST 2006 until Wed Jul 16 19:59:59 EDT 2036

      adding as trusted cert:
        Subject: CN=OpenTrust Root CA G1, O=OpenTrust, C=FR
        Issuer: CN=OpenTrust Root CA G1, O=OpenTrust, C=FR
        Algorithm: RSA; Serial number: 0x1120b39055397d7f366d64c2a79f6b638e67
        Valid from Mon May 26 04:45:50 EDT 2014 until Thu Jan 14 19:00:00 EST 2038

      adding as trusted cert:
        Subject: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
        Issuer: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
        Algorithm: RSA; Serial number: 0x0
        Valid from Fri May 29 01:00:39 EDT 2009 until Tue May 29 01:00:39 EDT 2029

      adding as trusted cert:
        Subject: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
        Issuer: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
        Algorithm: RSA; Serial number: 0x15c8bd65475cafb897005ee406d2bc9d
        Valid from Sun Dec 19 21:31:27 EST 2004 until Tue Dec 19 21:31:27 EST 2034

      adding as trusted cert:
        Subject: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x7777062726a9b17c
        Valid from Fri Jan 29 09:06:06 EST 2010 until Tue Dec 31 09:06:06 EST 2030

      adding as trusted cert:
        Subject: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Issuer: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Algorithm: RSA; Serial number: 0x444c0
        Valid from Wed Oct 22 08:07:37 EDT 2008 until Mon Dec 31 07:07:37 EST 2029

      adding as trusted cert:
        Subject: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
        Issuer: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
        Algorithm: RSA; Serial number: 0x50946cec18ead59c4dd597ef758fa0ad
        Valid from Mon Nov 01 12:14:04 EST 2004 until Mon Jan 01 00:37:19 EST 2035

      adding as trusted cert:
        Subject: CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
        Issuer: CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
        Algorithm: RSA; Serial number: 0x-11d4c2142bde21eb579d53fb0c223bff
        Valid from Tue Jan 07 18:00:00 EST 2003 until Tue Jan 07 17:59:59 EST 2031

      adding as trusted cert:
        Subject: CN=Sonera Class2 CA, O=Sonera, C=FI
        Issuer: CN=Sonera Class2 CA, O=Sonera, C=FI
        Algorithm: RSA; Serial number: 0x1d
        Valid from Fri Apr 06 03:29:40 EDT 2001 until Tue Apr 06 03:29:40 EDT 2021

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Algorithm: EC; Serial number: 0x3cb2f4480a00e2feeb243b5e603ec36b
        Valid from Sun Nov 04 19:00:00 EST 2007 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
        Issuer: CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
        Algorithm: RSA; Serial number: 0x1
        Valid from Mon Oct 21 05:17:18 EDT 2013 until Fri Oct 21 05:17:18 EDT 2033

      adding as trusted cert:
        Subject: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: EC; Serial number: 0x1f47afaa62007050544c019e9b63992a
        Valid from Wed Mar 05 19:00:00 EST 2008 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=ISRG Root X1, O=Internet Security Research Group, C=US
        Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US
        Algorithm: RSA; Serial number: 0x8210cfb0d240e3594463e0bb63828b00
        Valid from Thu Jun 04 07:04:38 EDT 2015 until Mon Jun 04 07:04:38 EDT 2035

      adding as trusted cert:
        Subject: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x2ac5c266a0b409b8f0b79f2ae462577
        Valid from Thu Nov 09 19:00:00 EST 2006 until Sun Nov 09 19:00:00 EST 2031

      adding as trusted cert:
        Subject: CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Issuer: CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Algorithm: RSA; Serial number: 0xda9bec71f303b019
        Valid from Thu Feb 04 07:32:16 EST 2016 until Mon Dec 31 12:23:16 EST 2029

      adding as trusted cert:
        Subject: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x1
        Valid from Thu Mar 04 00:00:00 EST 2004 until Sun Mar 04 00:00:00 EST 2029

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
        Algorithm: RSA; Serial number: 0x4000000000121585308a2
        Valid from Wed Mar 18 06:00:00 EDT 2009 until Sun Mar 18 06:00:00 EDT 2029

      adding as trusted cert:
        Subject: CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x1
        Valid from Thu Mar 04 00:00:00 EST 2004 until Sun Mar 04 00:00:00 EST 2029

      adding as trusted cert:
        Subject: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
        Issuer: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
        Algorithm: RSA; Serial number: 0x20000b9
        Valid from Fri May 12 14:46:00 EDT 2000 until Mon May 12 19:59:00 EDT 2025

      adding as trusted cert:
        Subject: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Dec 31 19:00:00 EST 2003 until Sun Dec 31 18:59:59 EST 2028

      adding as trusted cert:
        Subject: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
        Issuer: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jun 29 13:39:16 EDT 2004 until Thu Jun 29 13:39:16 EDT 2034

      adding as trusted cert:
        Subject: CN=OpenTrust Root CA G2, O=OpenTrust, C=FR
        Issuer: CN=OpenTrust Root CA G2, O=OpenTrust, C=FR
        Algorithm: RSA; Serial number: 0x1120a1691bbfbdb9bd52968f23e848bf2611
        Valid from Sun May 25 20:00:00 EDT 2014 until Thu Jan 14 19:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x9b7e0649a33e62b9d5ee90487129ef57
        Valid from Thu Sep 30 20:00:00 EDT 1999 until Wed Jul 16 19:59:59 EDT 2036

      adding as trusted cert:
        Subject: OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
        Issuer: OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
        Algorithm: RSA; Serial number: 0x5d938d306736c8061d1ac754846907
        Valid from Wed Oct 29 11:59:56 EDT 2008 until Mon Dec 31 19:00:00 EST 2029

      adding as trusted cert:
        Subject: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
        Issuer: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
        Algorithm: RSA; Serial number: 0x40000000001154b5ac394
        Valid from Tue Sep 01 08:00:00 EDT 1998 until Fri Jan 28 07:00:00 EST 2028

      adding as trusted cert:
        Subject: CN=OpenTrust Root CA G3, O=OpenTrust, C=FR
        Issuer: CN=OpenTrust Root CA G3, O=OpenTrust, C=FR
        Algorithm: EC; Serial number: 0x1120e6f84cfc24b0be0540acda831b34603f
        Valid from Sun May 25 20:00:00 EDT 2014 until Thu Jan 14 19:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5, O=TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?., L=Ankara, C=TR
        Issuer: CN=TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5, O=TÜRKTRUST Bilgi ?leti?im ve Bili?im Güvenli?i Hizmetleri A.?., L=Ankara, C=TR
        Algorithm: RSA; Serial number: 0x8e17fe242081
        Valid from Tue Apr 30 04:07:01 EDT 2013 until Fri Apr 28 04:07:01 EDT 2023

      adding as trusted cert:
        Subject: CN=AffirmTrust Networking, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Networking, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x7c4f04391cd4992d
        Valid from Fri Jan 29 09:08:24 EST 2010 until Tue Dec 31 09:08:24 EST 2030

      adding as trusted cert:
        Subject: CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
        Issuer: CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
        Algorithm: RSA; Serial number: 0xcbe
        Valid from Wed Jun 27 02:28:33 EDT 2012 until Tue Dec 31 10:59:59 EST 2030

      adding as trusted cert:
        Subject: CN=AffirmTrust Premium, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Premium, O=AffirmTrust, C=US
        Algorithm: RSA; Serial number: 0x6d8c1446b1a60aee
        Valid from Fri Jan 29 09:10:36 EST 2010 until Mon Dec 31 09:10:36 EST 2040

      adding as trusted cert:
        Subject: O=Government Root Certification Authority, C=TW
        Issuer: O=Government Root Certification Authority, C=TW
        Algorithm: RSA; Serial number: 0x1f9d595ad72fc20644a5800869e35ef6
        Valid from Thu Dec 05 08:23:33 EST 2002 until Sun Dec 05 08:23:33 EST 2032

      adding as trusted cert:
        Subject: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x15ac6e9419b2794b41f627a9c3180f1f
        Valid from Tue Apr 01 20:00:00 EDT 2008 until Tue Dec 01 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
        Issuer: CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
        Algorithm: RSA; Serial number: 0x1
        Valid from Thu Aug 28 03:24:33 EDT 2008 until Tue Dec 31 10:59:59 EST 2030

      adding as trusted cert:
        Subject: CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
        Issuer: CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
        Algorithm: RSA; Serial number: 0xa7ea6df4b449eda6a24859ee6b815d3167fbbb1
        Valid from Thu Mar 05 08:21:57 EST 2015 until Mon Mar 05 08:21:57 EST 2035

      adding as trusted cert:
        Subject: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Issuer: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Algorithm: RSA; Serial number: 0xa3da427ea4b1aeda
        Valid from Fri Aug 01 08:29:50 EDT 2008 until Sat Jul 31 08:29:50 EDT 2038

      adding as trusted cert:
        Subject: C=DE, O=Atos, CN=Atos TrustedRoot 2011
        Issuer: C=DE, O=Atos, CN=Atos TrustedRoot 2011
        Algorithm: RSA; Serial number: 0x5c33cb622c5fb332
        Valid from Thu Jul 07 10:58:30 EDT 2011 until Tue Dec 31 18:59:59 EST 2030

      adding as trusted cert:
        Subject: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Issuer: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Algorithm: RSA; Serial number: 0x56b629cd34bc78f6
        Valid from Wed May 31 14:14:37 EDT 2017 until Fri May 30 14:14:37 EDT 2042

      adding as trusted cert:
        Subject: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
        Issuer: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
        Algorithm: RSA; Serial number: 0x4f1bd42f54bb2f4b
        Valid from Wed Oct 25 04:32:46 EDT 2006 until Sat Oct 25 04:32:46 EDT 2036

      adding as trusted cert:
        Subject: CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
        Issuer: CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Apr 08 00:56:47 EDT 2009 until Sun Apr 08 00:56:47 EDT 2029

      adding as trusted cert:
        Subject: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Issuer: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Algorithm: EC; Serial number: 0x75e6dfcbc1685ba8
        Valid from Fri Feb 12 13:14:03 EST 2016 until Tue Feb 12 13:14:03 EST 2041

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
        Algorithm: RSA; Serial number: 0x4a538c28
        Valid from Tue Jul 07 13:25:54 EDT 2009 until Sat Dec 07 12:55:54 EST 2030

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0xce7e0e517d846fe8fe560fc1bf03039
        Valid from Thu Nov 09 19:00:00 EST 2006 until Sun Nov 09 19:00:00 EST 2031

      adding as trusted cert:
        Subject: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
        Issuer: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Jun 29 13:06:20 EDT 2004 until Thu Jun 29 13:06:20 EDT 2034

      adding as trusted cert:
        Subject: CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Issuer: CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Algorithm: RSA; Serial number: 0x25a1dfca33cb5902
        Valid from Thu Feb 04 07:32:23 EST 2016 until Sun Dec 31 12:26:39 EST 2034

      adding as trusted cert:
        Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
        Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
        Algorithm: RSA; Serial number: 0x1
        Valid from Mon Nov 25 03:25:55 EST 2013 until Sun Oct 25 04:25:55 EDT 2043

      adding as trusted cert:
        Subject: CN=Secure Global CA, O=SecureTrust Corporation, C=US
        Issuer: CN=Secure Global CA, O=SecureTrust Corporation, C=US
        Algorithm: RSA; Serial number: 0x75622a4e8d48a894df413c8f0f8eaa5
        Valid from Tue Nov 07 14:42:28 EST 2006 until Mon Dec 31 14:52:06 EST 2029

      adding as trusted cert:
        Subject: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
        Issuer: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
        Algorithm: RSA; Serial number: 0x1
        Valid from Tue May 30 06:48:38 EDT 2000 until Sat May 30 06:48:38 EDT 2020

      adding as trusted cert:
        Subject: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Issuer: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Oct 01 06:29:56 EDT 2008 until Sat Oct 01 19:59:59 EDT 2033

      adding as trusted cert:
        Subject: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: EC; Serial number: 0x55556bcf25ea43535c3a40fd5ab4572
        Valid from Thu Aug 01 08:00:00 EDT 2013 until Fri Jan 15 07:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Issuer: CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
        Algorithm: RSA; Serial number: 0x84822c5f1c62d040
        Valid from Thu Feb 04 07:32:33 EST 2016 until Mon Dec 31 12:28:07 EST 2029

      adding as trusted cert:
        Subject: CN=Class 2 Primary CA, O=Certplus, C=FR
        Issuer: CN=Class 2 Primary CA, O=Certplus, C=FR
        Algorithm: RSA; Serial number: 0x85bd4bf3d8dae369f694d75fc3a54423
        Valid from Wed Jul 07 13:05:00 EDT 1999 until Sat Jul 06 19:59:59 EDT 2019

      adding as trusted cert:
        Subject: CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
        Issuer: CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
        Algorithm: RSA; Serial number: 0x413d72c7f46b1f81437df1d22854df9a
        Valid from Sun Dec 11 11:03:44 EST 2005 until Fri Dec 11 11:09:51 EST 2037

      adding as trusted cert:
        Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
        Issuer: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
        Algorithm: RSA; Serial number: 0x23456
        Valid from Tue May 21 00:00:00 EDT 2002 until Sat May 21 00:00:00 EDT 2022

      adding as trusted cert:
        Subject: CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
        Issuer: CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
        Algorithm: RSA; Serial number: 0x57cb336fc25c16e6471617e3903168e0
        Valid from Thu Nov 30 19:00:00 EST 2006 until Mon Dec 31 18:59:59 EST 2029

      adding as trusted cert:
        Subject: CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
        Issuer: CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
        Algorithm: RSA; Serial number: 0x184accd6
        Valid from Tue Aug 07 23:07:01 EDT 2012 until Sun Dec 30 22:07:01 EST 2029

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
        Algorithm: EC; Serial number: 0x605949e0262ebb55f90a778a71f94ad86c
        Valid from Mon Nov 12 19:00:00 EST 2012 until Mon Jan 18 22:14:07 EST 2038

      adding as trusted cert:
        Subject: CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
        Issuer: CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
        Algorithm: RSA; Serial number: 0x0
        Valid from Tue Dec 06 08:49:52 EST 2011 until Mon Dec 01 08:49:52 EST 2031

      adding as trusted cert:
        Subject: CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Issuer: CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
        Algorithm: RSA; Serial number: 0x21d6d04a4f250fc93237fcaa5e128de9
        Valid from Thu Oct 06 04:39:56 EDT 2011 until Sat Oct 06 04:39:56 EDT 2046

      adding as trusted cert:
        Subject: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 20:00:00 EDT 2009 until Thu Dec 31 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
        Issuer: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
        Algorithm: RSA; Serial number: 0xa0142800000014523cf467c00000002
        Valid from Thu Jan 16 12:53:32 EST 2014 until Mon Jan 16 12:53:32 EST 2034

      adding as trusted cert:
        Subject: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
        Issuer: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
        Algorithm: RSA; Serial number: 0x3863def8
        Valid from Fri Dec 24 12:50:51 EST 1999 until Tue Jul 24 10:15:12 EDT 2029

      adding as trusted cert:
        Subject: CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
        Issuer: CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
        Algorithm: RSA; Serial number: 0x98a239
        Valid from Thu Nov 14 06:28:42 EST 2013 until Mon Nov 13 18:00:00 EST 2028

      adding as trusted cert:
        Subject: CN=TeliaSonera Root CA v1, O=TeliaSonera
        Issuer: CN=TeliaSonera Root CA v1, O=TeliaSonera
        Algorithm: RSA; Serial number: 0x95be16a0f72e46f17b398272fa8bcd96
        Valid from Thu Oct 18 08:00:50 EDT 2007 until Mon Oct 18 08:00:50 EDT 2032

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Algorithm: RSA; Serial number: 0x344ed55720d5edec49f42fce37db2b6d
        Valid from Thu Nov 16 19:00:00 EST 2006 until Wed Jul 16 19:59:59 EDT 2036

      adding as trusted cert:
        Subject: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 20:00:00 EDT 2009 until Thu Dec 31 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=Visa eCommerce Root, OU=Visa International Service Association, O=VISA, C=US
        Issuer: CN=Visa eCommerce Root, OU=Visa International Service Association, O=VISA, C=US
        Algorithm: RSA; Serial number: 0x1386354d1d3f06f2c1f96505d5901c62
        Valid from Tue Jun 25 22:18:36 EDT 2002 until Thu Jun 23 20:16:12 EDT 2022

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: EC; Serial number: 0x2f80fe238c0e220f486712289187acb3
        Valid from Sun Nov 04 19:00:00 EST 2007 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
        Issuer: CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
        Algorithm: RSA; Serial number: 0x98968d
        Valid from Wed Dec 08 06:19:29 EST 2010 until Thu Dec 08 06:10:28 EST 2022

      adding as trusted cert:
        Subject: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
        Issuer: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
        Algorithm: RSA; Serial number: 0x456b5054
        Valid from Mon Nov 27 15:23:42 EST 2006 until Fri Nov 27 15:53:42 EST 2026

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0xb931c3ad63967ea6723bfc3af9af44b
        Valid from Thu Aug 01 08:00:00 EDT 2013 until Fri Jan 15 07:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Issuer: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Algorithm: RSA; Serial number: 0x7b2c9bd316803299
        Valid from Fri Feb 12 12:39:39 EST 2016 until Tue Feb 12 12:39:39 EST 2041

      adding as trusted cert:
        Subject: CN=Amazon Root CA 4, O=Amazon, C=US
        Issuer: CN=Amazon Root CA 4, O=Amazon, C=US
        Algorithm: EC; Serial number: 0x66c9fd7c1bb104c2943e5717b7b2cc81ac10e
        Valid from Mon May 25 20:00:00 EDT 2015 until Fri May 25 20:00:00 EDT 2040

      adding as trusted cert:
        Subject: CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
        Issuer: CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
        Algorithm: RSA; Serial number: 0x92b888dbb08ac163
        Valid from Thu Jul 19 05:15:30 EDT 2012 until Sat Jul 19 05:15:30 EDT 2042

      adding as trusted cert:
        Subject: CN=DST Root CA X3, O=Digital Signature Trust Co.
        Issuer: CN=DST Root CA X3, O=Digital Signature Trust Co.
        Algorithm: RSA; Serial number: 0x44afb080d6a327ba893039862ef8406b
        Valid from Sat Sep 30 17:12:19 EDT 2000 until Thu Sep 30 10:01:15 EDT 2021

      adding as trusted cert:
        Subject: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
        Issuer: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
        Algorithm: RSA; Serial number: 0x2
        Valid from Tue Oct 26 04:38:03 EDT 2010 until Fri Oct 26 04:38:03 EDT 2040

      adding as trusted cert:
        Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
        Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
        Algorithm: RSA; Serial number: 0x983f4
        Valid from Thu Nov 05 03:50:46 EST 2009 until Mon Nov 05 03:50:46 EST 2029

      adding as trusted cert:
        Subject: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: EC; Serial number: 0xba15afa1ddfa0b54944afcd24a06cec
        Valid from Thu Aug 01 08:00:00 EDT 2013 until Fri Jan 15 07:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
        Issuer: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
        Algorithm: RSA; Serial number: 0xbb401c43f55e4fb0
        Valid from Wed Oct 25 04:30:35 EDT 2006 until Sat Oct 25 04:30:35 EDT 2036

      adding as trusted cert:
        Subject: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Issuer: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Algorithm: EC; Serial number: 0x5c8b99c55a94c5d27156decd8980cc26
        Valid from Sun Jan 31 19:00:00 EST 2010 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: OU=certSIGN ROOT CA, O=certSIGN, C=RO
        Issuer: OU=certSIGN ROOT CA, O=certSIGN, C=RO
        Algorithm: RSA; Serial number: 0x200605167002
        Valid from Tue Jul 04 13:20:04 EDT 2006 until Fri Jul 04 13:20:04 EDT 2031

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x509
        Valid from Fri Nov 24 13:27:00 EST 2006 until Mon Nov 24 13:23:33 EST 2031

      adding as trusted cert:
        Subject: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
        Issuer: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
        Algorithm: RSA; Serial number: 0xa0142800000014523c844b500000002
        Valid from Thu Jan 16 13:12:23 EST 2014 until Mon Jan 16 13:12:23 EST 2034

      adding as trusted cert:
        Subject: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
        Issuer: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
        Algorithm: RSA; Serial number: 0x26
        Valid from Fri Jul 09 08:11:00 EDT 1999 until Tue Jul 09 19:59:00 EDT 2019

      adding as trusted cert:
        Subject: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
        Issuer: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
        Algorithm: RSA; Serial number: 0x983f3
        Valid from Thu Nov 05 03:35:58 EST 2009 until Mon Nov 05 03:35:58 EST 2029

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x78585f2ead2c194be3370735341328b596d46593
        Valid from Thu Jan 12 12:27:44 EST 2012 until Sun Jan 12 12:27:44 EST 2042

      adding as trusted cert:
        Subject: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Issuer: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
        Algorithm: RSA; Serial number: 0x1fd6d30fca3ca51a81bbc640e35032d
        Valid from Sun Jan 31 19:00:00 EST 2010 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=Izenpe.com, O=IZENPE S.A., C=ES
        Issuer: CN=Izenpe.com, O=IZENPE S.A., C=ES
        Algorithm: RSA; Serial number: 0xb0b75a16485fbfe1cbf58bd719e67d
        Valid from Thu Dec 13 08:08:28 EST 2007 until Sun Dec 13 03:27:25 EST 2037

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
        Algorithm: RSA; Serial number: 0x400000000010f8626e60d
        Valid from Fri Dec 15 03:00:00 EST 2006 until Wed Dec 15 03:00:00 EST 2021

      adding as trusted cert:
        Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x18dad19e267de8bb4a2158cdcc6b3b4a
        Valid from Tue Nov 07 19:00:00 EST 2006 until Wed Jul 16 19:59:59 EDT 2036

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x5c6
        Valid from Fri Nov 24 14:11:23 EST 2006 until Mon Nov 24 14:06:44 EST 2031

      adding as trusted cert:
        Subject: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Issuer: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
        Algorithm: RSA; Serial number: 0x0
        Valid from Mon Aug 31 20:00:00 EDT 2009 until Thu Dec 31 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
        Issuer: CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
        Algorithm: RSA; Serial number: 0x76b1205274f0858746b3f8231af6c2c0
        Valid from Mon Dec 01 10:00:32 EST 2014 until Thu Dec 01 10:10:31 EST 2039

      adding as trusted cert:
        Subject: CN=Amazon Root CA 3, O=Amazon, C=US
        Issuer: CN=Amazon Root CA 3, O=Amazon, C=US
        Algorithm: EC; Serial number: 0x66c9fd5749736663f3b0b9ad9e89e7603f24a
        Valid from Mon May 25 20:00:00 EDT 2015 until Fri May 25 20:00:00 EDT 2040

      adding as trusted cert:
        Subject: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d
        Valid from Thu Jan 12 15:26:32 EST 2012 until Sun Jan 12 15:26:32 EST 2042

      adding as trusted cert:
        Subject: EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
        Issuer: EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
        Algorithm: RSA; Serial number: 0xc27e43044e473f19
        Valid from Tue Jun 16 07:30:18 EDT 2009 until Sun Dec 30 06:30:18 EST 2029

      adding as trusted cert:
        Subject: CN=NetLock Arany (Class Gold) F?tanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
        Issuer: CN=NetLock Arany (Class Gold) F?tanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
        Algorithm: RSA; Serial number: 0x49412ce40010
        Valid from Thu Dec 11 10:08:21 EST 2008 until Wed Dec 06 10:08:21 EST 2028

      adding as trusted cert:
        Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
        Issuer: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
        Algorithm: RSA; Serial number: 0x570a119742c4e3cc
        Valid from Thu Sep 22 07:22:02 EDT 2011 until Sun Sep 22 07:22:02 EDT 2030

      adding as trusted cert:
        Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
        Issuer: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
        Algorithm: RSA; Serial number: 0x53ec3beefbb2485f
        Valid from Wed May 20 04:38:15 EDT 2009 until Tue Dec 31 03:38:15 EST 2030

      adding as trusted cert:
        Subject: CN=Certplus Root CA G1, O=Certplus, C=FR
        Issuer: CN=Certplus Root CA G1, O=Certplus, C=FR
        Algorithm: RSA; Serial number: 0x11205583e42d3e5456852d8337b72cdc4611
        Valid from Sun May 25 20:00:00 EDT 2014 until Thu Jan 14 19:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=Certigna, O=Dhimyotis, C=FR
        Issuer: CN=Certigna, O=Dhimyotis, C=FR
        Algorithm: RSA; Serial number: 0xfedce3010fc948ff
        Valid from Fri Jun 29 11:13:05 EDT 2007 until Tue Jun 29 11:13:05 EDT 2027

      adding as trusted cert:
        Subject: CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tu?ra EBG Bili?im Teknolojileri ve Hizmetleri A.?., L=Ankara, C=TR
        Issuer: CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tu?ra EBG Bili?im Teknolojileri ve Hizmetleri A.?., L=Ankara, C=TR
        Algorithm: RSA; Serial number: 0x6a683e9c519bcb53
        Valid from Tue Mar 05 07:09:48 EST 2013 until Fri Mar 03 07:09:48 EST 2023

      adding as trusted cert:
        Subject: C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
        Issuer: C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
        Algorithm: RSA; Serial number: 0x5ec3b7a6437fa4e0
        Valid from Thu May 05 05:37:37 EDT 2011 until Tue Dec 31 04:37:37 EST 2030

      adding as trusted cert:
        Subject: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
        Issuer: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
        Algorithm: RSA; Serial number: 0x3ab6508b
        Valid from Mon Mar 19 13:33:33 EST 2001 until Wed Mar 17 14:33:33 EDT 2021

      adding as trusted cert:
        Subject: CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Issuer: CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
        Algorithm: EC; Serial number: 0x2c299c5b16ed0595
        Valid from Fri Feb 12 13:15:23 EST 2016 until Tue Feb 12 13:15:23 EST 2041

      adding as trusted cert:
        Subject: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
        Issuer: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
        Algorithm: RSA; Serial number: 0x2
        Valid from Tue Oct 26 04:28:58 EDT 2010 until Fri Oct 26 04:28:58 EDT 2040

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
        Algorithm: EC; Serial number: 0x35fc265cd9844fc93d263d579baed756
        Valid from Sun Nov 04 19:00:00 EST 2007 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Issuer: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
        Algorithm: RSA; Serial number: 0x401ac46421b31321030ebbe4121ac51d
        Valid from Tue Apr 01 20:00:00 EDT 2008 until Tue Dec 01 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=Cybertrust Global Root, O="Cybertrust, Inc"
        Issuer: CN=Cybertrust Global Root, O="Cybertrust, Inc"
        Algorithm: RSA; Serial number: 0x400000000010f85aa2d48
        Valid from Fri Dec 15 03:00:00 EST 2006 until Wed Dec 15 03:00:00 EST 2021

      adding as trusted cert:
        Subject: CN=Amazon Root CA 1, O=Amazon, C=US
        Issuer: CN=Amazon Root CA 1, O=Amazon, C=US
        Algorithm: RSA; Serial number: 0x66c9fcf99bf8c0a39e2f0788a43e696365bca
        Valid from Mon May 25 20:00:00 EDT 2015 until Sat Jan 16 19:00:00 EST 2038

      adding as trusted cert:
        Subject: OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
        Issuer: OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
        Algorithm: RSA; Serial number: 0x1b1fadb620f924d3366bf7c7f18ca059
        Valid from Tue Dec 23 07:14:06 EST 2003 until Sun Jan 21 06:36:54 EST 2024

      adding as trusted cert:
        Subject: CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
        Issuer: CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
        Algorithm: RSA; Serial number: 0x7d0997fef047ea7a
        Valid from Wed Nov 26 00:13:15 EST 2014 until Mon Dec 31 10:59:59 EST 2040

      adding as trusted cert:
        Subject: CN=Amazon Root CA 2, O=Amazon, C=US
        Issuer: CN=Amazon Root CA 2, O=Amazon, C=US
        Algorithm: RSA; Serial number: 0x66c9fd29635869f0a0fe58678f85b26bb8a37
        Valid from Mon May 25 20:00:00 EDT 2015 until Fri May 25 20:00:00 EDT 2040

      adding as trusted cert:
        Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
        Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
        Algorithm: EC; Serial number: 0x2a38a41c960a04de42b228a50be8349802
        Valid from Mon Nov 12 19:00:00 EST 2012 until Mon Jan 18 22:14:07 EST 2038

      adding as trusted cert:
        Subject: CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: RSA; Serial number: 0x4e812d8a8265e00b02ee3e350246e53d
        Valid from Thu Nov 30 19:00:00 EST 2006 until Mon Dec 31 18:59:59 EST 2029

      adding as trusted cert:
        Subject: EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
        Issuer: EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
        Algorithm: RSA; Serial number: 0x5480f9a073ed3f004cca89d8e371e64a
        Valid from Sat Oct 30 06:10:30 EDT 2010 until Tue Dec 17 18:59:59 EST 2030

      adding as trusted cert:
        Subject: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Issuer: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
        Algorithm: RSA; Serial number: 0xc9cdd3e9d57d23ce
        Valid from Fri Aug 01 08:31:40 EDT 2008 until Sat Jul 31 08:31:40 EDT 2038

      adding as trusted cert:
        Subject: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Issuer: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
        Algorithm: RSA; Serial number: 0x4caaf9cadb636fe01ff74ed85b03869d
        Valid from Mon Jan 18 19:00:00 EST 2010 until Mon Jan 18 18:59:59 EST 2038

      adding as trusted cert:
        Subject: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Issuer: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
        Algorithm: RSA; Serial number: 0x600197b746a7eab4b49ad64b2ff790fb
        Valid from Tue Apr 01 20:00:00 EDT 2008 until Tue Dec 01 18:59:59 EST 2037

      adding as trusted cert:
        Subject: CN=Certplus Root CA G2, O=Certplus, C=FR
        Issuer: CN=Certplus Root CA G2, O=Certplus, C=FR
        Algorithm: EC; Serial number: 0x1120d991ceaea3e8c5e7ffe902afcf73bc55
        Valid from Sun May 25 20:00:00 EDT 2014 until Thu Jan 14 19:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
        Issuer: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
        Algorithm: EC; Serial number: 0x7497258ac73f7a54
        Valid from Fri Jan 29 09:20:24 EST 2010 until Mon Dec 31 09:20:24 EST 2040

      adding as trusted cert:
        Subject: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Issuer: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
        Algorithm: RSA; Serial number: 0x1
        Valid from Wed Oct 01 06:40:14 EDT 2008 until Sat Oct 01 19:59:59 EDT 2033

      adding as trusted cert:
        Subject: CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
        Issuer: CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
        Algorithm: RSA; Serial number: 0x98968c
        Valid from Wed Mar 26 07:18:17 EDT 2008 until Wed Mar 25 07:03:10 EDT 2020

      adding as trusted cert:
        Subject: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Issuer: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
        Algorithm: RSA; Serial number: 0x33af1e6a711a9a0bb2864b11d09fae5
        Valid from Thu Aug 01 08:00:00 EDT 2013 until Fri Jan 15 07:00:00 EST 2038

      adding as trusted cert:
        Subject: CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
        Issuer: CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
        Algorithm: RSA; Serial number: 0x3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4
        Valid from Mon Oct 19 03:43:30 EDT 2015 until Fri Oct 19 03:43:30 EDT 2035

      keyStore is :
      keyStore type is : jks
      keyStore provider is :
      init keystore
      init keymanager of type SunX509
      trigger seeding of SecureRandom
      done seeding SecureRandom
      Allow unsafe renegotiation: false
      Allow legacy hello messages: true
      Is initial handshake: true
      Is secure renegotiation: false
      main, setSoTimeout(0) called
      main, the previous server name in SNI (type=host_name (0), value=secure1.symphonycdm.com) was replaced with (type=host_name (0), value=secure1.symphonycdm.com)
      %% No cached client session
      *** ClientHello, TLSv1
      RandomCookie: GMT: 1525188088 bytes = { 194, 208, 195, 9, 29, 105, 131, 217, 250, 227, 69, 1, 229, 255, 238, 9, 61, 216, 3, 82, 49, 179, 9, 240, 126, 131, 39, 187 }
      Session ID: {}
      Cipher Suites: [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
      Compression Methods: { 0 }
      Extension elliptic_curves, curve names: {secp256r1, secp384r1, secp521r1}
      Extension ec_point_formats, formats: [uncompressed]
      Extension extended_master_secret
      Extension server_name, server_name: [type=host_name (0), value=secure1.symphonycdm.com]
      ***
      main, WRITE: TLSv1 Handshake, length = 129
      main, received EOFException: error
      main, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
      main, SEND TLSv1.2 ALERT: fatal, description = handshake_failure
      main, WRITE: TLSv1.2 Alert, length = 2
      main, called closeSocket()
      Exception in thread "main" javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1002)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
      at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
      at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
      at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1564)
      at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1492)
      at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:263)
      at com.harris.openjdk8.TLS1Test.main(TLS1Test.java:20)
      Caused by: java.io.EOFException: SSL peer shut down incorrectly
      at sun.security.ssl.InputRecord.read(InputRecord.java:505)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:983)
      ... 9 more

      ---------- BEGIN SOURCE ----------
          package openjdk8.tests;

          import java.io.BufferedReader;
          import java.io.InputStream;
          import java.io.InputStreamReader;
          import java.net.URL;
          import javax.net.ssl.HttpsURLConnection;

          public class TLS1Test {
          
              public static void main( String args[] ) throws Exception {
              
                  String httpsURL = "https://secure1.symphonycdm.com/AirsceneDataV2/?wsdl";
                  URL myUrl = new URL(httpsURL);
                  HttpsURLConnection conn = (HttpsURLConnection)myUrl.openConnection();
                  InputStream is = conn.getInputStream();
                  InputStreamReader isr = new InputStreamReader(is);
                  BufferedReader br = new BufferedReader(isr);

                  String inputLine;

                  while ((inputLine = br.readLine()) != null) {
                      System.out.println(inputLine);
                  }

                  br.close();
              
              }
          }

      ---------- END SOURCE ----------

      CUSTOMER SUBMITTED WORKAROUND :
      None at this time.

      FREQUENCY : always


        Attachments

          Activity

            People

            • Assignee:
              psonal Pallavi Sonal (Inactive)
              Reporter:
              webbuggrp Webbug Group
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: