Check that the EJBCA server SSL certificate is properly configured. That is:

• Can be validated using the trust store described in Downloading the EJBCA certificate chain. 
• Includes the EJBCA server hostname in the Common Name (CN) or SAN (Subject Alternative Names) fields.