I managed to configure my CXF-based client properly so that it finds the correct SSL certificate for the server on which I am running a web service:
Put -Djsse.enableSNIExtension=false in your appserver VM Options.
-Djsse.enableSNIExtension=false