$ cat /tmp/pkcs11.cfg
name = NSSfips
nssLibraryDirectory = /usr/local/opt/nss/lib
nssSecmodDirectory = /tmp/fipsdb
nssModule = fips

$ export NSPR_LOG_MODULES="all:9"
$ export NSPR_LOG_FILE="/tmp/pkcs11.log"
$ export NSS_DEBUG_PKCS11_MODULE="NSS Internal PKCS #11 Module"
$ java -Djava.security.debug=sunpkcs11 -cp jetty-all-9.4.19.v20190610-uber.jar:openjsse-1.0.1-SNAPSHOT.jar:. HelloNSS11 '[redacted]'
2019-07-09 07:58:38.105:INFO::main: Logging initialized @158ms to org.eclipse.jetty.util.log.StdErrLog
SunPKCS11 loading /tmp/pkcs11.cfg
Exception in thread "main" java.security.ProviderException: Could not initialize NSS
	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:218)
	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11$1.run(SunPKCS11.java:113)
	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11$1.run(SunPKCS11.java:110)
	at java.base/java.security.AccessController.doPrivileged(Native Method)
	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.configure(SunPKCS11.java:110)
	at HelloNSS11.main(HelloNSS11.java:63)
Caused by: java.io.IOException: NSS initialization failed
	at jdk.crypto.cryptoki/sun.security.pkcs11.Secmod.initialize(Secmod.java:234)
	at jdk.crypto.cryptoki/sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:213)
	... 5 more

$ cat /tmp/pkcs11.log
161026048[7fba49435db0]: Loaded library a.out (init)
161026048[7fba49435db0]: Loaded library /usr/local/opt/nss/lib/libfreebl3.dylib (load lib)
161026048[7fba49435db0]: Loaded library /usr/local/opt/nss/lib/libsoftokn3.dylib (load lib)
161026048[7fba49435db0]: Loaded library /usr/local/opt/nss/lib/libnssdbm3.dylib (load lib)