This typically means the full certificate chain is not imported into the keystore. Importing your CA's intermediate certificate should resolve it.