No subject alternative DNS name exception in LDAPS validation

Issue

• Error No subject alternative DNS name matching XXXXXX found when authenticating using an ldaps realm or security domain.

• After upgrading to JDK my ldaps validation throws a CertificateException.

  Exception in thread "main" javax.naming.CommunicationException: ad.sample.com:636 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching XXXXXX found.]
      at com.sun.jndi.ldap.Connection.<init>(Connection.java:238)
      at com.sun.jndi.ldap.LdapClient.<init>(LdapClient.java:137)
      at com.sun.jndi.ldap.LdapClient.getInstance(LdapClient.java:1615)
      at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2749)
      at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
      at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
      at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210)
      at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153)
      at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83)
      at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
      at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313)
      at javax.naming.InitialContext.init(InitialContext.java:244)
      at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:154)
      ...
  Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching XXXXXX found.
      at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
      at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1964)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:328)
      at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:322)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1614)
      at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
      at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052)
      at sun.security.ssl.Handshaker.process_record(Handshaker.java:987)
      at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
      at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
      at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
      at com.sun.jndi.ldap.Connection.createSocket(Connection.java:394)
      at com.sun.jndi.ldap.Connection.<init>(Connection.java:215)
      ... 15 more
  Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching XXXXXX found.
      at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:214)
      at sun.security.util.HostnameChecker.match(HostnameChecker.java:96)
      at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:459)
      at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:436)
      at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:200)
      at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
      at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1596)
          ... 24 more