java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
Background MD2 was widely recognized as insecure and thus disabled in Java in version JDK 6u17 (see release notes http://www.oracle.com/technetwork/java/javase/6u17-141447.html, “Disable MD2 in certificate chain validation”), as well as JDK 7, as per the configuration you pointed out in java.security. Verisign was using a Class 3 root certificate with the md2WithRSAEncryption signature algorithm (serial 70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf), … Read more