As far as i can tell [the SSL problems](https://www.irccloud.com/pastebin/946ittrP) are caused due to lack of [SNI](https://en.wikipedia.org/wiki/Server_Name_Indication) support (I believe Java <= 6).

SNI "allows multiple secure (HTTPS) websites [...] to be served off the same IP address without requiring all those sites to use the same certificate"

We're running Crafatar behind CloudFlare and since they proxy quite a few sites they have to use SNI.

I [found this](http://jafag.blogspot.de/2008/12/java-ssl-no-subject-alternative-matched.html), maybe that workaround could work? I don't know if this makes it insecure, though.