PKIX

The standard way Java checks a certificate chain, and the name in its error when the chain does not lead to a trusted authority.

A client reporting PKIX path building failed could not link the broker's certificate to any certificate authority in its truststore. The usual fix is to import the issuing authority's certificate into the client's truststore.