Test sun/security/ssl/X509TrustManagerImpl/distrust/Symantec.java fails by temurin-jdk-21.0.6+7 or temurin-jdk-17.0.14+7

[sendaoYan]

Test command:

wget "https://objects.githubusercontent.com/github-production-release-asset-2e65be/602574963/c476bbc2-f181-4954-877b-d60e0fd6336b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250217T030215Z&X-Amz-Expires=300&X-Amz-Signature=166eae51038d274dea80ed78a4b54b60a46dc861614eee8bc9a82268b809a13c&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DOpenJDK21U-jdk_x64_linux_hotspot_21.0.6_7.tar.gz&response-content-type=application%2Foctet-stream" -O OpenJDK21U-jdk_x64_linux_hotspot_21.0.6_7.tar.gz
tar xf OpenJDK21U-jdk_x64_linux_hotspot_21.0.6_7.tar.gz
jtreg -va -nr -w tmp -jdk:jdk-21.0.6+7/ test/jdk/sun/security/ssl/X509TrustManagerImpl/distrust/Symantec.java

result:

Testing geotrustprimarycag2
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388)
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271)
        at java.base/sun.security.validator.Validator.validate(Validator.java:256)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:241)
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:113)
        at Distrust.testTM(Distrust.java:125)
        at Distrust.testCertificateChain(Distrust.java:82)
        at Symantec.main(Symantec.java:77)
        at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
        at java.base/java.lang.reflect.Method.invoke(Method.java:580)
        at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
        at java.base/java.lang.Thread.run(Thread.java:1583)
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
        at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
        at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
        at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383)
        ... 11 more
java.lang.RuntimeException: Unexpected exception: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at Distrust.testTM(Distrust.java:138)
        at Distrust.testCertificateChain(Distrust.java:82)
        at Symantec.main(Symantec.java:77)
        at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
        at java.base/java.lang.reflect.Method.invoke(Method.java:580)
        at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
        at java.base/java.lang.Thread.run(Thread.java:1583)

Symantec.java.log

If I change the testd jdk from temurin21 to the jdk build by myself, this test will run passes. So the bug maybe come from build process.