title: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
body: <p>I have a mapping application that can add <em>ArcGIS 9.3+</em> base maps given a URL.  One of the URLs that I would like to add is from a customer's URL and is secured.  My mapping application was using Java 6 before and was able to add the secure URL with no issues.  I now upgraded to Java 7 and am getting a </p>
  
  <pre><code>"java.security.cert.CertificateException: Certificates does not conform to algorithm constraints"
  </code></pre>
  
  <p>exception.  At first, I believe this to be the case because in Java 7, by default, the <code>MD2</code> algorithm to sign SSL certificates is disabled.  You can see this in the java.security file:</p>
  
  <pre><code>"jdk.certpath.disabledAlgorithms=MD2"
  </code></pre>
  
  <p>But when I check the <code>Certification Signature Algorithm</code> of that URL, it says <code>SHA-1</code>.  What is even more strange is if I comment out the <code>"jdk.certpath.disabledAlgorithms=MD2"</code> line in the <code>java.security</code> file, the URL will work with no issues.  Is <code>MD2</code> used somewhere else during the SSL process?  Am I missing something here?</p>