Product(s) tested: jre 8u60 b09
OS/architecture: Windows x64/64
Reproducible: Always
Is it a Regression: Yes
Tested with 8u45 and test worked fine
Is it a platform specific issue: No

Steps to reproduce:
1. Clear webstart cache with javaws -uninstall
2. Add http://stt-13.ru.oracle.com to exception site list
3. Launch javaws http://stt-13.ru.oracle.com/newroot/testsuites/180_user_ws/aluht/JDF/EmbeddedCertificates/jnlp/testEmbedcert_normal_signedjar_signedjnlp.jnlp
4. The application gets launched successfully
5. To launch the same application from local tomcat, please download the following zip.
      http://stt-13.ru.oracle.com/newroot/testsuites/180_user_ws/aluht/JDF/EmbeddedCertificates.zip
6. Unzip the file and deploy the contained EmbeddedCertificates folder to tomcat. Restart tomcat.
7. Launch the application locally using
   http://127.0.0.1:8080/EmbeddedCertificates/jnlp/testEmbedcert_normal_signedjar_signedjnlp.jnlp

   When the application is launched from local tomcat, webstart throws JNLP Signing error.
JNLPSigningException[Failed to validate signing of launch file. The signed version does not match the downloaded version.]
at com.sun.javaws.jnl.LaunchDesc.checkSigningTemplate(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedLaunchDescHelper(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedLaunchDesc(Unknown Source)
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedLaunchDesc(Unknown Source)
at com.sun.javaws.Launcher.prepareResources(Unknown Source)
at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
at com.sun.javaws.Launcher.launch(Unknown Source)
at com.sun.javaws.Main.launchApp(Unknown Source)
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
at com.sun.javaws.Main.access$000(Unknown Source)
at com.sun.javaws.Main$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

Note: Please find the jnlp from tomcat launch and remote launch attached. The files differ in newline and space characters.