bug ID : https://bugs.openjdk.java.net/browse/JDK-8164846 webrev : http://cr.openjdk.java.net/~coffeys/webrev.8164846.jdk9/webrev/
A CertificateException in SSLContextImpl doesn't include information about the cause of the exception. This can often contain a valuable snippet of information about the exact reason for the exception (like a constraint failure).
-- Regards, Sean.