public synchronized void checkForDuplicates(Lei lei) throws Exception{	
		
 		if (readTestXML.readFile("C:\\work\\Docs\\xml_lei_1_duplicate_001.xml"))
		{
		   try
		   {
			 String keyPassphrase = "111111";
			   
			 SSLContext sslContext = SSLContext.getInstance("TLS"); 
		
	 sslContext.init(null, new TrustManager[]{tm}, new java.security.SecureRandom()); 
			   
			// настройки cacerts и прочег везде в статьях по разному применены - сейчас все примерно в таком виде
			 System.setProperty("javax.net.ssl.trustStore", "/work/cacerts");
			 System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
			 System.setProperty("javax.net.ssl.trustStoreType", "JKS");
			   
			 System.setProperty("javax.net.ssl.keyStore", "/work/cert.p12");
			 System.setProperty("javax.net.ssl.keyStorePassword",keyPassphrase);	
			 System.setProperty("javax.net.ssl.keyStoreType", "PKCS12");
		
			
		     URL url=new URL(strUrl);
		     
		     KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
		   
		     keyStore.load(new FileInputStream("/work/keystore.jks"), keyPassphrase.toCharArray());		     		     
		     

		     TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm()); 
		    		 
		     
		     tmf.init(keyStore);
		     
		   
		     
		     sslContext.init(null, tmf.getTrustManagers(), new java.security.SecureRandom());
		     
		     HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
		     
		     HostnameVerifier allHostsValid = new HostnameVerifier() {
					@Override
					public boolean verify(String hostname, SSLSession session) {						
						return true;
					}
		        };
		     
		     HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
		     		     
		     HttpsURLConnection httpcon=(HttpsURLConnection)url.openConnection();
		     httpcon.setSSLSocketFactory(sslContext.getSocketFactory());
		     httpcon.setDoOutput(true);
		     httpcon.setDoInput(true);
		     httpcon.setUseCaches(false);
		     httpcon.setAllowUserInteraction(false);
	         httpcon.setRequestMethod("POST");	       
	      
	         String authStr = testLeiStr + ":" + pass;
	         httpcon.setRequestProperty  ("Authorization", "Basic " + Base64.getEncoder().encodeToString(authStr.getBytes()));	       
	         httpcon.setConnectTimeout(longOfTimeout);
	         httpcon.setRequestProperty("Accept", "application/json");
	         httpcon.setRequestProperty("Content-Type", "application/json");
// тут сама ошибка проявляется	        
	         OutputStreamWriter output = new OutputStreamWriter(httpcon.getOutputStream());
	         
	         System.out.println(readTestXML.getResStr());
	         httpcon.connect();
	         output.write(readTestXML.getResStr());	         
	         
	         gleifDuplicateCheckJsonRead.readResponceB(httpcon.getResponseMessage());
		   }
		   catch (Exception e)
		   {
			 new Notification(app.getMessage("gleifDuplicate.msgErrorQuestion") + " " + e, Notification.Type.ERROR_MESSAGE).show(Page.getCurrent());
			 log.debug(e.getMessage());
		   }
		}
	}	

error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCer

Keytool-Fehler: java.lang.Exception: Eingabe kein X.509-Zertifikat
java.lang.Exception: Eingabe kein X.509-Zertifikat
                at sun.security.tools.keytool.Main.addTrustedCert(Main.java:2655)
                at sun.security.tools.keytool.Main.doCommands(Main.java:1009)
                at sun.security.tools.keytool.Main.run(Main.java:343)
                at sun.security.tools.keytool.Main.main(Main.java:336)