Signature trust could not be established via PKIX validation of signing credential

[Cantor, Scott]

> My logs look almost exactly the same as yours except the references to PKIX
> vs ExplicitKey.  I restarted the IDP and captured the logs on startup to see if it
> is loading that trust engine, and from what I can tell it appears to at least be
> parsing the config for it:

Yeah, that matches, but something's obviously wrong. If the logs don't show it falling through the first trust engine that's enough to explain the result you get, if not why.

-- Scott