Make sure you're serving the full chain to the root CA, that might be the issue. LE certs might have that issue with Java apps, since the cross-signed CA isn't

Make sure you're serving the full chain to the root CA, that might be the issue. LE certs might have that issue with Java apps, since the cross-signed CA isn't currently included in the Oracle root store (they're working on that).