2807709 - J2EE GRMG checks > Web Services Status showing red due to HTTPS Peer certificate rejected by ChainVerifier

The Web Services Status is showing red as in image below:

In the defaultTrace (/usr/sap/<SID>/<InstID>/j2ee/cluster/serverX/log/defaultTrace*.trc) the following exception can be seen:

#2.0#<timestamp>#<timezone>#Error#com.sap.engine.httpdsrclient.protocol.instrumented.https##BC-JAS-WEB#tc~bl~dsrhttpclient#<Exception ID>#<Unix timestamp>#sap.com/com.sap.engine.heartbeat#com.sap.engine.httpdsrclient.protocol.instrumented.https#Guest#<Exception ID 2>#<Exception ID 3>#Thread[HTTP Worker [@<thread ID>],5,Dedicated_Application_Thread]#Plain##Cannot establish connection to URL https://<FQDN>:<HTTPS Port>/GRMGWSTest/service?wsdl. Ensure that you have maintained valid server certificates for this URL in the trust store. See also note 2479773.
[EXCEPTION]
org.w3c.www.protocol.http.HttpException: Peer certificate rejected by ChainVerifier
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
at iaik.security.ssl.y.a(SourceFile:932)
at iaik.security.ssl.n.b(SourceFile:1066)
at iaik.security.ssl.n.a(SourceFile:1503)
at iaik.security.ssl.y.d(SourceFile:784)
at iaik.security.ssl.SSLTransport.startHandshake(SourceFile:569)
at iaik.security.ssl.SSLTransport.getOutputStream(SourceFile:648)
at iaik.security.ssl.SSLSocket.getOutputStream(SourceFile:391)
at org.w3c.www.protocol.http.HttpBasicConnection.a(SourceFile:463)
at org.w3c.www.protocol.http.HttpBasicServer.getConnection(SourceFile:449)
at org.w3c.www.protocol.http.HttpBasicServer.runRequest(SourceFile:1211)
at org.w3c.www.protocol.http.HttpManager.runRequest(SourceFile:1191)
at org.w3c.www.protocol.http.HttpURLConnection.connect(SourceFile:322)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.connect(DSRHttpsURLConnection.java:91)
at org.w3c.www.protocol.http.HttpURLConnection.a(SourceFile:178)
at org.w3c.www.protocol.http.HttpURLConnection.getInputStream(SourceFile:550)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.getInputStream(DSRHttpsURLConnection.java:123)
at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(XMLEntityManager.java:675)
at com.sun.org.apache.xerces.internal.impl.XMLVersionDetector.determineDocVersion(XMLVersionDetector.java:148)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:806)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:771)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:243)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:197)
at com.sap.security.hardener.xml.parsers.HardenedDocumentBuilder.parse(HardenedDocumentBuilder.java:145)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.parse(SharedDocumentBuilders.java:185)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.loadDOMDocument(SharedDocumentBuilders.java:281)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:100)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:74)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.loadWSDLDefinitions(SAPServiceDelegate.java:220)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.<init>(SAPServiceDelegate.java:128)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createDelegate(CTSProvider.java:179)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createServiceDelegate(CTSProvider.java:160)
at javax.xml.ws.Service.<init>(Service.java:77)
at com.sap.engine.heartbeat.grmg.ws.client.GRMGWSTest.<init>(GRMGWSTest.java:17)
at com.sap.engine.heartbeat.ServerGRMGApplication.testWebServices(ServerGRMGApplication.java:415)
at com.sap.engine.heartbeat.ServerGRMGApplication.processComponents(ServerGRMGApplication.java:161)
at com.sap.engine.heartbeat.ServerGRMGApplication.doPost(ServerGRMGApplication.java:93)

• SAP Solution Manager
• SAP NetWeaver

GRMG heartbeat webserviecs j2ee check https certificate chain rejected peer ChainVerifier , KBA , BC-JAS-ADM-MON , Monitoring , SV-SMG-MON-ALR , Monitoring/Alerting/Reporting Infrastructure , BC-ESI-WS-JAV-RT , Runtime , Problem