(sorry to break the thread chain, I just recently joined the list and missed
the original responses)
So the example image I was trying to use in FOP was a random google image
search result (for foo) that was on a BBC media server that had https with a
valid signed (not self-signed) certificate. And when I try to fetch the image
using the simple java program below, it works fine. So it doesn't seem to be
a JDK or certificate problem. Can someone else test the .fo file in my original
email? Feel free to replace the image url with an https reference you trust.