How do I resolve "FATAL Alert:BAD_CERTIFICATE - A corrupt or unusable certificate was received" when making an Ajax call(Post) from WIDM to another application?

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

When attempting to make a AJAX web service call to another application it will fail with the error message:

"FATAL Alert:BAD_CERTIFICATE - A corrupt or unusable certificate was received"

Environment

Identity Manager on WebLogic

Cause

This is most often caused by using Wild Card certificates. 

For example:

"keytool -list -v -{keystore your_trust_store}"

Owner: CN=*.ca.com, OU=Domain, O=*.ca.com

Shows a wild card certificate being used by the remote application.

Resolution

This will need to be resolved with the assistance of your WebLogic admin as there are a number of possible resolutions from getting non-wild card certificate(s), disabling hostname verification within WebLogic, to creating a HostnameVerifier.

The following link may be of some assistance:

http://jandrewthompson.blogspot.com/2010/04/weblogic-and-wildcard-ssl-certificates.html