@fs8972 We never did get it working in CFMX7/Linux. Speculation: the JRE
we're using (1.4.x IIRC) is simply too old to deal with the
SHA256-signed Entrust G2 cert. Upgrading the JRE is a royal PITA—we're
not exactly a Java shop—and successfully using...