title: SSLException: Received fatal alert: certificate_unknown
body: <p>We are getting below SSL exception in our weblogic logs. We have cluster with 3 managed nodes. We see following error:</p>
  
  <pre><code>####&lt;Nov 24, 2017 9:44:47 AM UTC&gt; &lt;Error&gt; &lt;Cluster&gt; &lt;test01p&gt; &lt;weblogicNode2&gt; &lt;[ACTIVE] ExecuteThread: '16' for queue: 'weblogic.kernel.Default (self-tuning)'&gt; &lt;&lt;WLS Kernel&gt;&gt; &lt;&gt; &lt;&gt; &lt;1511516687321&gt; &lt;BEA-000141&gt; &lt;TCP/IP socket failure occurred while fetching statedump over HTTP from 6487706098770813262S:icgaspapp:[-1,-1,43011,43011,-1,-1,-1]:serverapp:43008,serverapp:43018,serverapp:43028:weblogicDomain:weblogicNode3.
  javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
          at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
          at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1639)
          at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1607)
          at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1776)
          at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1068)
          at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:890)
          at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:764)
          at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:664)
          at weblogic.security.SSL.jsseadapter.JaSSLEngine$5.run(JaSSLEngine.java:134)
          at weblogic.security.SSL.jsseadapter.JaSSLEngine.doAction(JaSSLEngine.java:732)
          at weblogic.security.SSL.jsseadapter.JaSSLEngine.unwrap(JaSSLEngine.java:132)
          at weblogic.socket.JSSEFilterImpl.unwrap(JSSEFilterImpl.java:511)
          at weblogic.socket.JSSEFilterImpl.unwrapAndHandleResults(JSSEFilterImpl.java:454)
          at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:82)
          at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:66)
          at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:61)
          at weblogic.socket.JSSEFilterImpl.write(JSSEFilterImpl.java:396)
          at weblogic.socket.JSSESocket$JSSEOutputStream.write(JSSESocket.java:89)
          at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
          at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
          at java.io.FilterOutputStream.flush(FilterOutputStream.java:140)
          at weblogic.net.http.HttpURLConnection.writeRequests(HttpURLConnection.java:191)
          at weblogic.net.http.HttpURLConnection.getInputStream(HttpURLConnection.java:411)
          at weblogic.net.http.SOAPHttpsURLConnection.getInputStream(SOAPHttpsURLConnection.java:37)
          at weblogic.cluster.HTTPExecuteRequest.connect(HTTPExecuteRequest.java:67)
          at weblogic.cluster.HTTPExecuteRequest.run(HTTPExecuteRequest.java:82)
          at weblogic.work.ExecuteThread.execute(ExecuteThread.java:263)
          at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
  </code></pre>
  
  <p>If I see browser for same it shows below message for certs under Security tab :</p>
  
  <pre><code>This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store.
  </code></pre>
  
  <p>Certificate error:</p>
  
  <pre><code>There are issues with the site's certificate chain (net::ERR_CERT_AUTHORITY_INVALID).
  </code></pre>
  
  <p>Can someone assist on above error ?</p>