Quick question about ACF 2016 and web sockets over SSL. I have two instances of Cf on the same server, configured to host websockets over SSL on different ports. Both instances can be reached through their own hostnames. And they both have https enabled through nginx using the same certificate (additional subject alternative names). I have created a jks key store with the full certificate path ( server, intermediate and root CA) for both instances (they use the same one). Secure websockets work on instance one, doesn't on instance two. No errors in error.log, exception.log, server.log or out.log. f12 network tab just keeps idle and says "Finished" after certain amount of time instead of giving 101 Switching protocols. Any ideas? Also, same modus operandi on our dev / staging server works like a charm. Production environment failes to cooperate. Edit: fixed it by adding -Djdk.tls.client.protocols="TLSv1.2" -Djdk.tls.server.protocols="TLSv1.2" to the JVM arguments of the server...