Beyond this is the problem of telling the Java security system to
trust a particular web server. You should, of course, actually
trust the software on that site. I rather trust the software on my
site, since I wrote it. Here are the references for a Mac - I
suppose Windows and Linux machines are similar:
There are no screen shots on these pages. I suppose that is
because Oracle would really rather not have you doing this.