I broke my head at this problem and checked all 45 articles on stackoverflow about this. In the end I found out, that I emptied the existing cacerts keystore first and added then my certificates (with KeyStore Explorer). This seemed to be wrong. I had to add my certificates first and then remove all the others I do not need. It seems that somehow the structure broke with emptying it or something like that. Hope that helps anybody.