Java HttpClient SSLHandshake Fail After Sometime

I have a JAVA Web Application in a Tomcat 7 with JDK 8 . My cacert file path and password is defined in setenv.sh file and has all needed certificates.

My initiates and is able to make some HTTPS connections with a server, but, after some time, a javax.net.ssl.SSLHandshakeException starts do occurs. If I reestart the server or redeploy the applications, everything works again.

I am using commons-httpclient-3.1-jbossorg-1.jar.

Here my setenv.sh configuration:

-Djavax.net.ssl.trustStore=/mypath/cacerts -Djavax.net.ssl.trustStorePassword=changeit

Here the code that starts the connection:

private Object execute(HttpMethod method, boolean returnAsString) throws HTTPMetodosException {
    MultiThreadedHttpConnectionManager cm = new MultiThreadedHttpConnectionManager();
    HttpConnectionManagerParams param = cm.getParams();
    param.setConnectionTimeout(60000);
    param.setSoTimeout(60000);

    HttpClient client = new HttpClient(cm);
    try {
        int httpStatus = client.executeMethod(method);
        if (httpStatus != 200) {
            if (httpStatus == 401) {
                throw new HTTPMetodosException(
                        String.format("A requisição não foi autorizada. Verifique os paramêtros de autenticação e/ou seu certificado digital.;HTTP Status: %d.;", httpStatus) + method.getResponseBodyAsString());
            } else if (httpStatus > 220) {
                throw new HTTPMetodosException(String.format("A requisição falhou.;HTTP Status: %d.;", httpStatus) + method.getResponseBodyAsString());
            }
        }
        if (returnAsString)
            return new String(IOUtils.toByteArray(method.getResponseBodyAsStream()));
        else {
            byte[] targetArray = method.getResponseBody();
            return targetArray;
        }
    } catch (Exception e) {
        e.printStackTrace();
        logger.error(e, e.getCause());
        throw new HTTPMetodosException("A requisição falhou. Tente novamente.; Mensagem Erro:" + e.getMessage());
    } finally {
        method.releaseConnection();
    }
}

And here when the error presents:

 2022-05-20 13:35:51 ERROR MontarWSdoRPS_SpeedNotas:191 - Enviando plugnotasnnfse para o link https://api.plugnotas.com.br/nfse.
2022-05-20 13:35:51 ERROR MontarWSdoRPS_SpeedNotas:198 - /usr/sisdedetizadora/cacerts
2022-05-20 13:35:51 ERROR MontarWSdoRPS_SpeedNotas:200 - /usr/sisdedetizadora/cacerts
%% Initialized:  [Session-97933, SSL_NULL_WITH_NULL_NULL]
https-jsse-nio-443-exec-298, WRITE: TLSv1.2 Application Data, length = 356
https-jsse-nio-443-exec-392, WRITE: TLSv1.2 Application Data, length = 16384
https-jsse-nio-443-exec-392, WRITE: TLSv1.2 Application Data, length = 532
https-jsse-nio-443-exec-392, WRITE: TLSv1.2 Application Data, length = 144
https-jsse-nio-443-exec-392, WRITE: TLSv1.2 Application Data, length = 20
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
pool-852-thread-1, setSoTimeout(60000) called
pool-852-thread-1, setSoTimeout(60000) called
%% No cached client session
update handshake state: client_hello[1]
upcoming handshake states: server_hello[2]
*** ClientHello, TLSv1.2
RandomCookie:  GMT: 1636221799 bytes = { 89, 12, 141, 138, 239, 130, 132, 3, 155, 160, 110, 251, 189, 199, 214, 198, 223, 100, 136, 110, 229, 176, 55, 118, 146, 112, 246, 192 }
Session ID:  {}
Cipher Suites: [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
Compression Methods:  { 0 }
Extension elliptic_curves, curve names: {secp256r1, secp384r1, secp521r1}
Extension ec_point_formats, formats: [uncompressed]
Extension signature_algorithms, signature_algorithms: SHA512withECDSA, SHA512withRSA, SHA384withECDSA, SHA384withRSA, SHA256withECDSA, SHA256withRSA, SHA256withDSA, SHA224withECDSA, SHA224withRSA, SHA224withDSA, SHA1withECDSA, SHA1withRSA, SHA1withDSA
Extension extended_master_secret
Extension server_name, server_name: [type=host_name (0), value=api.plugnotas.com.br]
***
pool-852-thread-1, WRITE: TLSv1.2 Handshake, length = 214
pool-852-thread-1, READ: TLSv1.2 Handshake, length = 89
check handshake state: server_hello[2]
*** ServerHello, TLSv1.2
RandomCookie:  GMT: -9111016 bytes = { 147, 179, 122, 135, 245, 85, 72, 73, 185, 226, 237, 128, 4, 223, 207, 149, 28, 220, 215, 70, 160, 236, 93, 196, 195, 1, 71, 162 }
Session ID:  {205, 150, 163, 123, 123, 77, 89, 161, 188, 108, 79, 108, 210, 105, 217, 47, 134, 90, 46, 195, 13, 198, 104, 228, 202, 171, 160, 241, 147, 193, 22, 232}
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Compression Method: 0
Extension renegotiation_info, renegotiated_connection: <empty>
Extension ec_point_formats, formats: [uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2]
***
%% Initialized:  [Session-97934, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]
** TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
update handshake state: server_hello[2]
upcoming handshake states: server certificate[11]
upcoming handshake states: server_key_exchange[12](optional)
upcoming handshake states: certificate_request[13](optional)
upcoming handshake states: server_hello_done[14]
upcoming handshake states: client certificate[11](optional)
upcoming handshake states: client_key_exchange[16]
upcoming handshake states: certificate_verify[15](optional)
upcoming handshake states: client change_cipher_spec[-1]
upcoming handshake states: client finished[20]
upcoming handshake states: server change_cipher_spec[-1]
upcoming handshake states: server finished[20]
pool-852-thread-1, READ: TLSv1.2 Handshake, length = 4957
check handshake state: certificate[11]
update handshake state: certificate[11]
upcoming handshake states: server_key_exchange[12](optional)
upcoming handshake states: certificate_request[13](optional)
upcoming handshake states: server_hello_done[14]
upcoming handshake states: client certificate[11](optional)
upcoming handshake states: client_key_exchange[16]
upcoming handshake states: certificate_verify[15](optional)
upcoming handshake states: client change_cipher_spec[-1]
upcoming handshake states: client finished[20]
upcoming handshake states: server change_cipher_spec[-1]
upcoming handshake states: server finished[20]
*** Certificate chain
chain [0] = [
[
  Version: V3
  Subject: CN=plugnotas.com.br
  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

  Key:  Sun RSA public key, 2048 bits
  params: null
  modulus: 25275817432164159188092905493909437431745047507363725161465662192710974126816332884177370972183896578600148795516757424856364983578227315864150947308858744638947050621070019746052002081793411816135044216483886970037904632848744166094170528463639391421688859163800465117643032932130837975453307807295827667498933024189180702003465623892493683585168290462883591006792972310045853670938684106440909857396544283925427102557489956448440904880877091849683420836240372479899244518686629414116203275633912554887492687516631983179828469667359200404483103411172953483157552445842951420602558283538666576109204624685467972771433
  public exponent: 65537
  Validity: [From: Sun Jul 11 21:00:00 BRT 2021,
               To: Wed Aug 10 20:59:59 BRT 2022]
  Issuer: CN=Amazon, OU=Server CA 1B, O=Amazon, C=US
  SerialNumber: [    025d1f06 53b5bbab 6449a0a0 0344de0e]

Certificate Extensions: 10
[1]: ObjectId: 1.3.6.1.4.1.11129.2.4.2 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 82 01 6E 04 82 01 6A   01 68 00 76 00 29 79 BE  ...n...j.h.v.)y.
0010: F0 9E 39 39 21 F0 56 73   9F 63 A5 77 E5 BE 57 7D  ..99!.Vs.c.w..W.
0020: 9C 60 0A F8 F9 4D 5D 26   5C 25 5D C7 84 00 00 01  .`...M]&\%].....
0030: 7A 98 F2 5C B1 00 00 04   03 00 47 30 45 02 20 19  z..\......G0E. .
0040: 9C 63 D5 A7 F8 11 E7 9E   B2 06 E0 C4 88 19 F3 0F  .c..............
0050: 6A EE C5 24 0A 36 37 6F   92 D8 6A EC D3 F6 1B 02  j..$.67o..j.....
0060: 21 00 CC 30 22 25 EE F3   00 24 98 58 60 BF 32 4A  !..0"%...$.X`.2J
0070: F5 29 7C B5 75 DB FF AB   54 33 19 85 F0 C5 83 E0  .)..u...T3......
0080: 8A 4C 00 76 00 51 A3 B0   F5 FD 01 79 9C 56 6D B8  .L.v.Q.....y.Vm.
0090: 37 78 8F 0C A4 7A CC 1B   27 CB F7 9E 88 42 9A 0D  7x...z..'....B..
00A0: FE D4 8B 05 E5 00 00 01   7A 98 F2 5C EB 00 00 04  ........z..\....
00B0: 03 00 47 30 45 02 20 1F   14 B0 C6 67 53 47 CB 3C  ..G0E. ....gSG.<
00C0: 8A D4 2F D2 76 D9 F8 C7   46 CE 9A 49 E7 FF B6 51  ../.v...F..I...Q
00D0: 25 8A 3F C5 9D 42 C6 02   21 00 E2 55 50 66 25 35  %.?..B..!..UPf%5
00E0: C5 CE B2 6B C1 A5 2B AB   71 D9 C3 EA E9 85 BA 27  ...k..+.q......'
00F0: 5A 9C 41 C7 13 55 15 D7   BE 7E 00 76 00 41 C8 CA  Z.A..U.....v.A..
0100: B1 DF 22 46 4A 10 C6 A1   3A 09 42 87 5E 4E 31 8B  .."FJ...:.B.^N1.
0110: 1B 03 EB EB 4B C7 68 F0   90 62 96 06 F6 00 00 01  ....K.h..b......
0120: 7A 98 F2 5C 76 00 00 04   03 00 47 30 45 02 20 07  z..\v.....G0E. .
0130: 62 59 7B 8D FA 25 FD B7   17 D7 B5 29 7A 24 EE 21  bY...%.....)z$.!
0140: 7F 97 65 D2 40 8B B0 95   17 F2 39 77 B8 22 B5 02  [email protected]."..
0150: 21 00 A1 B2 C7 90 67 2C   E9 BD C8 44 12 75 42 79  !.....g,...D.uBy
0160: AA 1A 01 BA 39 97 9F 92   F1 B8 F7 66 20 77 1B 7B  ....9......f w..
0170: CE F0                                              ..


[2]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: ocsp
   accessLocation: URIName: http://ocsp.sca1b.amazontrust.com
, 
   accessMethod: caIssuers
   accessLocation: URIName: http://crt.sca1b.amazontrust.com/sca1b.crt
]
]

[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 59 A4 66 06 52 A0 7B 95   92 3C A3 94 07 27 96 74  Y.f.R....<...'.t
0010: 5B F9 3D D0                                        [.=.
]
]

[4]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:false
  PathLen: undefined
]

[5]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.sca1b.amazontrust.com/sca1b.crl]
]]

[6]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.23.140.1.2.1]
[]  ]
]

[7]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
  clientAuth
]

[8]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
]

[9]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: plugnotas.com.br
  DNSName: *.plugnotas.com.br
]

[10]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 83 A0 E2 75 5E D0 C7 AC   46 87 3C 62 75 A7 52 AE  ...u^...F.<bu.R.
0010: 9E 2B 49 C7                                        .+I.
]
]

]
  Algorithm: [SHA256withRSA]
  Signature:
0000: 61 B4 E0 FC 2E 79 ED 34   87 26 B5 FE BF 3A 41 C3  a....y.4.&...:A.
0010: 84 8C 51 48 80 6F 9D B8   17 C8 2B F3 B9 DF 3E D1  ..QH.o....+...>.
0020: 53 69 A4 45 F0 15 79 36   62 08 75 CF EB C0 49 E7  Si.E..y6b.u...I.
0030: 5A 33 2B 77 8E 87 D3 36   F3 E4 6C DC D1 D8 DB 87  Z3+w...6..l.....
0040: 01 B4 9A C1 6B 78 12 1F   07 38 E0 4D 9E 42 DF 43  ....kx...8.M.B.C
0050: A5 21 D9 15 A1 80 E0 8E   47 FF 1D 6F E1 1C 7A 9E  .!......G..o..z.
0060: 91 CF A2 4D DA E4 97 F9   A3 FD AD E6 3F C5 4D FD  ...M........?.M.
0070: B5 E7 73 93 34 7C F9 5D   EE 00 24 61 7B 82 57 3D  ..s.4..]..$a..W=
0080: BF 53 75 A7 86 A8 F0 41   CF AB 1A 51 7F 6C 23 25  .Su....A...Q.l#%
0090: 0A 54 0D 53 5B C6 5C DC   73 0D CE C1 DF BC AD 8F  .T.S[.\.s.......
00A0: 8C 07 A2 D6 03 1B B0 90   88 CC 0D AA DA 2D AF EE  .............-..
00B0: 4F C4 32 11 B3 B8 DE 16   A5 CC D8 4F 64 8A FE FA  O.2........Od...
00C0: 77 DF 08 BD 4F 25 E0 2F   DE CC 38 BC 83 ED 8D D0  w...O%./..8.....
00D0: 4B 56 20 92 97 CF BB 5A   F6 55 6E 90 F7 A2 F2 E7  KV ....Z.Un.....
00E0: C3 C7 1C FF FD 35 46 4F   74 68 25 FD 74 1E FB F2  .....5FOth%.t...
00F0: E4 54 F3 CF 1D 61 3D B5   28 BD 36 49 3F 68 35 D5  .T...a=.(.6I?h5.

]
chain [1] = [
[
  Version: V3
  Subject: CN=Amazon, OU=Server CA 1B, O=Amazon, C=US
  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

  Key:  Sun RSA public key, 2048 bits
  params: null
  modulus: 24528737555851895213919827617064808536856788789868126310716752303420041319710819680867697306230985630039655096548324364189962675576756038921107965025585889330528490649228935527969954506874750514159926943451238689552458142167021149788529783891257271028002485075630471793111207960868638365698705018555597520367289025831586046483446904825820575805338475813865444295353094097022678376192149453480223428943386514159000527368947588174705227657134217583008630047462959260157651883088072156905420231950318110240318878613016990846576820326568049365612395397183597930457965295993595011597251067348997341253617591444999389873893
  public exponent: 65537
  Validity: [From: Wed Oct 21 22:00:00 BRST 2015,
               To: Sat Oct 18 21:00:00 BRT 2025]
  Issuer: CN=Amazon Root CA 1, O=Amazon, C=US
  SerialNumber: [    067f9457 8587e8ac 77deb253 325bbc99 8b560d]

Certificate Extensions: 7
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: ocsp
   accessLocation: URIName: http://ocsp.rootca1.amazontrust.com
, 
   accessMethod: caIssuers
   accessLocation: URIName: http://crt.rootca1.amazontrust.com/rootca1.cer
]
]

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 84 18 CC 85 34 EC BC 0C   94 94 2E 08 59 9C C7 B2  ....4.......Y...
0010: 10 4E 0A 08                                        .N..
]
]

[3]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:0
]

[4]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.rootca1.amazontrust.com/rootca1.crl]
]]

[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.23.140.1.2.1]
[]  ]
]

[6]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

[7]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 59 A4 66 06 52 A0 7B 95   92 3C A3 94 07 27 96 74  Y.f.R....<...'.t
0010: 5B F9 3D D0                                        [.=.
]
]

]
  Algorithm: [SHA256withRSA]
  Signature:
0000: 85 92 BE 35 BB 79 CF A3   81 42 1C E4 E3 63 73 53  ...5.y...B...csS
0010: 39 52 35 E7 D1 AD FD AE   99 8A AC 89 12 2F BB E7  9R5........../..
0020: 6F 9A D5 4E 72 EA 20 30   61 F9 97 B2 CD A5 27 02  o..Nr. 0a.....'.
0030: 45 A8 CA 76 3E 98 4A 83   9E B6 E6 45 E0 F2 43 F6  E..v>.J....E..C.
0040: 08 DE 6D E8 6E DB 31 07   13 F0 2F 31 0D 93 6D 61  ..m.n.1.../1..ma
0050: 37 7B 58 F0 FC 51 98 91   28 02 4F 05 76 B7 D3 F0  7.X..Q..(.O.v...
0060: 1B C2 E6 5E D0 66 85 11   0F 2E 81 C6 10 81 29 FE  ...^.f........).
0070: 20 60 48 F3 F2 F0 84 13   53 65 35 15 11 6B 82 51   `H.....Se5..k.Q
0080: 40 55 57 5F 18 B5 B0 22   3E AD F2 5E A3 01 E3 C3  @UW_...">..^....
0090: B3 F9 CB 41 5A E6 52 91   BB E4 36 87 4F 2D A9 A4  ...AZ.R...6.O-..
00A0: 07 68 35 BA 94 72 CD 0E   EA 0E 7D 57 F2 79 FC 37  .h5..r.....W.y.7
00B0: C5 7B 60 9E B2 EB C0 2D   90 77 0D 49 10 27 A5 38  ..`....-.w.I.'.8
00C0: AD C4 12 A3 B4 A3 C8 48   B3 15 0B 1E E2 E2 19 DC  .......H........
00D0: C4 76 52 C8 BC 8A 41 78   70 D9 6D 97 B3 4A 8B 78  .vR...Axp.m..J.x
00E0: 2D 5E B4 0F A3 4C 60 CA   E1 47 CB 78 2D 12 17 B1  -^...L`..G.x-...
00F0: 52 8B CA 39 2C BD B5 2F   C2 33 02 96 AB DA 94 7F  R..9,../.3......

]
chain [2] = [
[
  Version: V3
  Subject: CN=Amazon Root CA 1, O=Amazon, C=US
  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

  Key:  Sun RSA public key, 2048 bits
  params: null
  modulus: 22529839904807742196558773392430766620630713202204326167346456925862066285712069978308045976033918808540171076811098215136401323342247576789054764683787147408289170989302937775178809187827657352584557953877946352196797789035355954596527030584944622221752357105572088106020206921431118198373122638305846252087992561841631797199384157902018140720267433956687491591657652730221337591680012205319549572614035105482287002884850178224609018864719685310905426619874727796905080238179726224664042154200651710137931048812546957419686875805576245376866031854569863410951649630469236463991472642618512857920826701027482532358669
  public exponent: 65537
  Validity: [From: Mon May 25 09:00:00 BRT 2015,
               To: Wed Dec 30 22:00:00 BRT 2037]
  Issuer: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  SerialNumber: [    067f944a 2a27cdf3 fac2ae2b 01f908ee b9c4c6]

Certificate Extensions: 7
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: ocsp
   accessLocation: URIName: http://ocsp.rootg2.amazontrust.com
, 
   accessMethod: caIssuers
   accessLocation: URIName: http://crt.rootg2.amazontrust.com/rootg2.cer
]
]

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 9C 5F 00 DF AA 01 D7 30   2B 38 88 A2 B8 6D 4A 9C  ._.....0+8...mJ.
0010: F2 11 91 83                                        ....
]
]

[3]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

[4]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.rootg2.amazontrust.com/rootg2.crl]
]]

[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.5.29.32.0]
[]  ]
]

[6]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

[7]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 84 18 CC 85 34 EC BC 0C   94 94 2E 08 59 9C C7 B2  ....4.......Y...
0010: 10 4E 0A 08                                        .N..
]
]

]
  Algorithm: [SHA256withRSA]
  Signature:
0000: 62 37 42 5C BC 10 B5 3E   8B 2C E9 0C 9B 6C 45 E2  b7B\...>.,...lE.
0010: 07 00 7A F9 C5 58 0B B9   08 8C 3E ED B3 25 3C B5  ..z..X....>..%<.
0020: 6F 50 E4 CD 35 6A A7 93   34 96 32 21 A9 48 44 AB  oP..5j..4.2!.HD.
0030: 9C ED 3D B4 AA 73 6D E4   7F 16 80 89 6C CF 28 03  ..=..sm.....l.(.
0040: 18 83 47 79 A3 10 7E 30   5B AC 3B B0 60 E0 77 D4  ..Gy...0[.;.`.w.
0050: 08 A6 E1 1D 7C 5E C0 BB   F9 9A 7B 22 9D A7 00 09  .....^....."....
0060: 7E AC 46 17 83 DC 9C 26   57 99 30 39 62 96 8F ED  ..F....&W.09b...
0070: DA DE AA C5 CC 1B 3E CA   43 68 6C 57 16 BC D5 0E  ......>.ChlW....
0080: 20 2E FE FF C2 6A 5D 2E   A0 4A 6D 14 58 87 94 E6   ....j]..Jm.X...
0090: 39 31 5F 7C 73 CB 90 88   6A 84 11 96 27 A6 ED D9  91_.s...j...'...
00A0: 81 46 A6 7E A3 72 00 0A   52 3E 83 88 07 63 77 89  .F...r..R>...cw.
00B0: 69 17 0F 39 85 D2 AB 08   45 4D D0 51 3A FD 5D 5D  i..9....EM.Q:.]]
00C0: 37 64 4C 7E 30 B2 55 24   42 9D 36 B0 5D 9C 17 81  7dL.0.U$B.6.]...
00D0: 61 F1 CA F9 10 02 24 AB   EB 0D 74 91 8D 7B 45 29  a.....$...t...E)
00E0: 50 39 88 B2 A6 89 35 25   1E 14 6A 47 23 31 2F 5C  P9....5%..jG#1/\
00F0: 9A FA AD 9A 0E 62 51 A4   2A A9 C4 F9 34 9D 21 18  .....bQ.*...4.!.

]
chain [3] = [
[
  Version: V3
  Subject: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

  Key:  Sun RSA public key, 2048 bits
  params: null
  modulus: 26894789576491863019171445242018370132029525033879210664513024255165308689836081694724912552986436241602345929261854187816625921774943728567119070351838976265193901442169339571326613928339955106648223197498035701437846440970934704192382084561469274550003268570741310868032789070264835003681318445644941362885752628282968349509706358865971392279088395067847314610178969555804359319567178098112935181143559364150874524817692694181296058297355335204675211145990489303168553611700020424738364579606192390834705213026692659672388567853246354560726855054573503174641583891075106464210711468427779853334564691648681991700229
  public exponent: 65537
  Validity: [From: Tue Sep 01 21:00:00 BRT 2009,
               To: Wed Jun 28 14:39:16 BRT 2034]
  Issuer: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
  SerialNumber: [    a70e4a4c 3482b77f]

Certificate Extensions: 7
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: ocsp
   accessLocation: URIName: http://o.ss2.us/
, 
   accessMethod: caIssuers
   accessLocation: URIName: http://x.ss2.us/x.cer
]
]

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: BF 5F B7 D1 CE DD 1F 86   F4 5B 55 AC DC D7 10 C2  ._.......[U.....
0010: 0E A9 88 E7                                        ....
]
]

[3]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

[4]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://s.ss2.us/r.crl]
]]

[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [2.5.29.32.0]
[]  ]
]

[6]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

[7]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 9C 5F 00 DF AA 01 D7 30   2B 38 88 A2 B8 6D 4A 9C  ._.....0+8...mJ.
0010: F2 11 91 83                                        ....
]
]

]
  Algorithm: [SHA256withRSA]
  Signature:
0000: 23 1D E3 8A 57 CA 7D E9   17 79 4C F1 1E 55 FD CC  #...W....yL..U..
0010: 53 6E 3E 47 0F DF C6 55   F2 B2 04 36 ED 80 1F 53  Sn>G...U...6...S
0020: C4 5D 34 28 6B BE C7 55   FC 67 EA CB 3F 7F 90 B2  .]4(k..U.g..?...
0030: 33 CD 1B 58 10 82 02 F8   F8 2F F5 13 60 D4 05 CE  3..X...../..`...
0040: F1 81 08 C1 DD A7 75 97   4F 18 B9 6D DE F7 93 91  ......u.O..m....
0050: 08 BA 7E 40 2C ED C1 EA   BB 76 9E 33 06 77 1D 0D  ...@,....v.3.w..
0060: 08 7F 53 DD 1B 64 AB 82   27 F1 69 D5 4D 5E AE F4  ..S..d..'.i.M^..
0070: A1 C3 75 A7 58 44 2D F2   3C 70 98 AC BA 69 B6 95  ..u.XD-.<p...i..
0080: 77 7F 0F 31 5E 2C FC A0   87 3A 47 69 F0 79 5F F4  w..1^,...:Gi.y_.
0090: 14 54 A4 95 5E 11 78 12   60 27 CE 9F C2 77 FF 23  .T..^.x.`'...w.#
00A0: 53 77 5D BA FF EA 59 E7   DB CF AF 92 96 EF 24 9A  Sw]...Y.......$.
00B0: 35 10 7A 9C 91 C6 0E 7D   99 F6 3F 19 DF F5 72 54  5.z.......?...rT
00C0: E1 15 A9 07 59 7B 83 BF   52 2E 46 8C B2 00 64 76  ....Y...R.F...dv
00D0: 1C 48 D3 D8 79 E8 6E 56   CC AE 2C 03 90 D7 19 38  .H..y.nV..,....8
00E0: 99 E4 CA 09 19 5B FF 07   96 B0 A8 7F 34 49 DF 56  .....[......4I.V
00F0: A9 F7 B0 5F ED 33 ED 8C   47 B7 30 03 5D F4 03 8C  ..._.3..G.0.]...

]
***
%% Invalidated:  [Session-97933, SSL_NULL_WITH_NULL_NULL]
%% Invalidated:  [Session-97934, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]
pool-852-thread-1, SEND TLSv1.2 ALERT:  fatal, description = certificate_unknown
pool-852-thread-1, WRITE: TLSv1.2 Alert, length = 2
pool-852-thread-1, called closeSocket()
pool-852-thread-1, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
pool-852-thread-1, called close()
pool-852-thread-1, called closeInternal(true)
pool-852-thread-1, called close()
pool-852-thread-1, called closeInternal(true)
pool-852-thread-1, called close()
pool-852-thread-1, called closeInternal(true)

All needed certificates are alredy in cacert and we have no idea what else can we do to solve this problem.

Any help will be very appreciated