Test ENV:
Mac 10.10.4/jre9-b93
Steps to reproduce:
1. Import rootca.cert to JRE_HOME/lib/security/cacerts to have a valid trusted cert
keytool -import -file rootca.cert -keystore JRE_HOME/lib/security/cacerts -storepass changeit -alias sslrootca -noprompt
http://sqeweb.us.oracle.com/net/scanas415/export/deployment/crystal/DO_NOT_REMOVE_ME/jrebug/JawsOcspAndCrlCheckManual/lib/rootca.cert
2. Add the following lines in hosts file of your system(Linux: /etc/hosts Mac: /private/etc/hosts)
        10.128.64.85 pki.poctest.com
        10.128.64.85 www.poctest.com
3. Make sure no proxy is set on your system/browser
4. Launch app: javaws https://www.poctest.com/JawsOcspAndCrlCheckManual/jnlp/testSSLCertBadChainJNLP.jnlp
5. If a security warning saying "The certificate is not valid and cannot be used to verify the identity of this website" shows up, then this bug is reproduced.
Expected behavior: There will be an error dialog shows up and "javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateRevokedException: Certificate has been revoked" should show up under "Exception" if clicking "Details" on error dialog.

Note:
it works fine on windows and linux