Cert Issue from SP

[It Meme]

Hi:

We have the one SP that is generating cert errors from the IdP

I have checked that the SP's 'sp-cert.pem' file, matches what was
entered into the IdP's metadata.

Any ideas what could be causing the IdP to generate the messages below?




13:03:37.096 - DEBUG
[org.opensaml.xml.security.keyinfo.BasicProviderKeyInfoCredentialResolver:291]
- Provider org.opensaml.xml.security.keyinfo.provider.RSAKeyValueProvider
doesn't handle objects of type
{http://www.w3.org/2000/09/xmldsig#}X509Data, skipping
13:03:37.096 - DEBUG
[org.opensaml.xml.security.keyinfo.BasicProviderKeyInfoCredentialResolver:291]
- Provider org.opensaml.xml.security.keyinfo.provider.DSAKeyValueProvider
doesn't handle objects of type
{http://www.w3.org/2000/09/xmldsig#}X509Data, skipping
13:03:37.097 - DEBUG
[org.opensaml.xml.security.keyinfo.BasicProviderKeyInfoCredentialResolver:296]
- Processing KeyInfo child
{http://www.w3.org/2000/09/xmldsig#}X509Data with provider
org.opensaml.xml.security.keyinfo.provider.InlineX509DataProvider
13:03:37.097 - DEBUG
[org.opensaml.xml.security.keyinfo.provider.InlineX509DataProvider:122]
- Attempting to extract credential from an X509Data
13:03:37.111 - ERROR
[org.opensaml.xml.security.keyinfo.provider.InlineX509DataProvider:192]
- Error extracting certificates from X509Data
java.security.cert.CertificateException: Unable to decode X.509 certificates
....
13:03:38.695 - WARN
[org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:208]
- There was an error evaluating the request's simple signature using
the trust engine
org.opensaml.xml.security.SecurityException: Error extracting
certificates from X509Data
	at org.opensaml.xml.security.keyinfo.provider.InlineX509DataProvider.extractCertificates(InlineX509DataProvider.java:193)
~[xmltooling-1.3.0.jar:na]
.....
Caused by: java.security.cert.CertificateException: Unable to decode
X.509 certificates
	at org.opensaml.xml.security.x509.X509Util.decodeCertificate(X509Util.java:320)
~[xmltooling-1.3.0.jar:na]

.......
Caused by: java.security.KeyStoreException: failed to extract any
certificates or private keys - maybe bad password?
	at org.apache.commons.ssl.KeyStoreBuilder.parse(KeyStoreBuilder.java:436)
~[not-yet-commons-ssl-0.3.9.jar:na]