[tomjen3]

It also means that we can find out who made it by looking at the signature.

Unless there is somewhere you can buy a java signature with bitcoins.

[teraflop]

The certificate is self-signed, which narrows it down to "somebody capable of downloading a copy of the JDK".