当我尝试连接启用了TLS的LDAP服务器时，它失败了，但有以下例外情况。我的my-ca.crt文件有什么问题吗？

public class LdapTest {
    
    public static void main (String[] args) throws Exception {
        LdapTest test = new LdapTest();
        test.tryit();
        System.out.println("Test End.");
    }

    public void tryit() throws Exception {      
        Hashtable<String, String> env = new Hashtable<String, String>();
        env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
        env.put(Context.PROVIDER_URL, "ldaps://xxx.xxx.xxx.xxx");
        env.put(Context.SECURITY_AUTHENTICATION, "simple");
        env.put(Context.REFERRAL,"ignore");
        env.put(Context.SECURITY_PROTOCOL,"ssl");
        String keystore = "/Users/dummy/Downloads/my-ca.crt";
        System.setProperty("javax.net.ssl.trustStore", keystore);

        DirContext ctx = null;
        try {
            ctx = new InitialDirContext(env);
            SearchControls sc = new SearchControls();
            sc.setSearchScope(SearchControls.SUBTREE_SCOPE);
            
            NamingEnumeration<SearchResult> results = ctx.search("cn=Directory Manager", "objectClass=*", sc);
            while (results.hasMore()) {
                SearchResult searchResult = results.next();
                System.out.println("----------" + searchResult.toString() + "---------");
            }
        } catch (javax.naming.AuthenticationException e) {
                e.printStackTrace();
        } catch (Exception e) {
                e.printStackTrace();
        } finally {
            if (ctx != null) {
                try {
                    ctx.close();
                } catch (NamingException e) {
                    // ignore
                }
            }
        }
    }
}

此外，我还可以使用一个虚拟的DummySSLSocketFactory连接到我的LDAP服务器，设置如下：

env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldaps://xxx.xxx.xxx.xxx");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.REFERRAL,"ignore");
env.put(Context.SECURITY_PROTOCOL,"ssl");
env.put("java.naming.ldap.factory.socket", "com.test.ldap.DummySSLSocketFactory");