TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded ...