Even with more recent Glassfish 2 downloads containing JDK1.6.0_18 and 1.6.0_20, this problem still persists, because the expired certificate has not been removed from the template stores.
A copy of the expired certificate also lives in (and should be deleted from) these keystores:
{installdir}/lib/install/templates/cacerts.jks
{installdir}lib/install/templates/ee/cacerts.jks
keytool -delete -v -alias verisignserverca -keystore lib/install/templates/cacerts.jks
keytool -delete -v -alias verisignserverca -keystore lib/install/templates/ee/cacerts.jks
The default master password required is "changeit".
[Message sent by forum member 'edrandall']
http://forums.java.net/jive/thread.jspa?messageID=476285