FULL PRODUCT VERSION :
java version "9"
Java(TM) SE Runtime Environment (build 9+181)
Java HotSpot(TM) Server VM (build 9+181, mixed mode, emulated-client)

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows [Version 6.1.7601]

A DESCRIPTION OF THE PROBLEM :
Let me know the information about below problem on JRE 9.

1. JRE 9 build 181 for windows 32 bit was installed without any problem (OS is windows 7 professional 32 bit)

2. For an applet in a JAR file (made by us), the URL for the document base of the applet was input in the exception site list

3. When browsing the URL using IE 11, "Failed to validate certificate. The application will not be executed." window is displayed and the applet does not work

In the case of JRE 8, the applet works well once the URL for the document base of the applet is in the exception site list.


REGRESSION. Last worked in version 8u144

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
The applet in a JAR file on the site which is described in the exception site list works.
ACTUAL -
The applet in a JAR file on the site which is described in the exception site list does not work.

ERROR MESSAGES/STACK TRACES THAT OCCUR :
java.lang.SecurityException: リソース(JARファイル)の署名を検証できませんでした
at jdk.deploy@9/com.sun.deploy.security.SandboxSecurity.isPermissionGranted(Unknown Source)
at jdk.deploy@9/com.sun.deploy.security.SandboxSecurity.isPermissionGranted(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.isTrustedByTrustDecider(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.getPermissions(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Applet2ClassLoader.getPermissions(Unknown Source)
at java.base/java.security.SecureClassLoader$1.apply(Unknown Source)
at java.base/java.security.SecureClassLoader$1.apply(Unknown Source)
at java.base/java.util.concurrent.ConcurrentHashMap.computeIfAbsent(Unknown Source)
at java.base/java.security.SecureClassLoader.getProtectionDomain(Unknown Source)
at java.base/java.security.SecureClassLoader.defineClass(Unknown Source)
at jdk.deploy@9/com.sun.deploy.security.DeployURLClassLoader.defineClass(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.access$000(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader$2.run(Unknown Source)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.findClassHelper(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
at java.base/java.lang.ClassLoader.loadClass(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
at jdk.plugin@9/sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.base/java.lang.Thread.run(Unknown Source)

REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
If MANIFEST.MF in the JAR file is deleted, the applet will work.