Yeah, I find this really annoying too. Java has all the right integration to windows trust store and you can write custom code to use it. But it’s not sued be default.

This makes using internal CAs a nightmare.