The Applet is launched as an NApplet.

The applet above is instantiated with the following code:

<object classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
      width="600" height="400">
   <param name="code" value="demos.applets.GearsApplet">
   <param name="archive" value="../jar/gluegen-rt.jar,
                                ../jar/jogl-all.jar,
                                jar/jogl-demos.jar">
   <comment>
     <embed code="demos.applets.GearsApplet"
          width="600" height="400"
          type="application/x-java-applet;version=1.6"
          pluginspage="http://java.sun.com/javase/downloads/ea.jsp"
          archive="../jar/gluegen-rt.jar,
                   ../jar/jogl-all.jar,
                   jar/jogl-demos.jar">
        <noembed>Sorry, no Java support detected.</noembed>
     </embed>
   </comment>
</object>

Note that the jogl-demos.jar, which contains the GearsApplet class, does not need to be signed! JogAmp Community signs jogl.jar and gluegen-rt.jar, which contain the JOGL's supporting classes; this is the only Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept.
Sadly, due to Oracle's Java Applet Plugin update 7u51, unsigned applets are no more allowed and effectively lower the bar to create user applets with raised privileges.
Hence JogAmp Community signs jogl-all.jar and gluegen-rt.jar, which contain the JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.
jogl-demos.jar's manifest file uses Permissions: sandbox to not raise privileges.