I have a web app that requires a client to send it\'s certificate and the server has to validate the certificate(i.e see if the issuer is a valid issuer and present in the s
i.e see if the issuer is a valid issuer and present in the server's truststore
JSSE already does all that. You don't have to do any of this, except maybe verify that the peer certificate hasn't expired.