The cert is correct, but i had to add it also to the keystore of openjdk
with the following command: sudo keytool -importcert -alias
GeoTrust_Global_CA -keystore
/usr/lib/jvm/java-1.11.0-openjdk-amd64/lib/security/cacerts -file
GeoTrust_Global_CA.crt...