ComplianceInvoice endpoint returns X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number

Onboarding, renewal and revocation
1

Hello,

We’re attempting to integrate with ZATCA but are encountering the following response:

{
“validationResults”: {
“infoMessages”: [
{
“type”: “INFO”,
“code”: “XSD_ZATCA_VALID”,
“category”: “XSD validation”,
“message”: “Complied with UBL 2.1 standards in line with ZATCA specifications”,
“status”: “PASS”
}
],
“warningMessages”: [
{
“type”: “WARNING”,
“code”: “invalid-signing-certificate”,
“category”: “CERTIFICATE_ERRORS”,
“message”: “X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.”,
“status”: “WARNING”
}
],
“errorMessages”: ,
“status”: “WARNING”
},
“reportingStatus”: “REPORTED”,
“clearanceStatus”: null,
“qrSellertStatus”: null,
“qrBuyertStatus”: null
}

We are using the same implementation that has worked successfully with many other customers, and this is the first time we’ve encountered this issue.

We’ve verified that the CSR generated contains the same VAT ID as the invoices included in the request. and we’re using the latest SDK 3.4.5

Do you have any suggestions on how to resolve this?

2

Morning @mekhlafy

Thanks for reaching out,

To provide comprehensive support as usual, can I kindly ask you to elaborate with the below:

  1. What is the exact environment?
  2. What was the date of issuing your CCSID?
  3. Did you successfully received you PCSID?

Thanks,
Ibrahem Daoud.

3

We ignored the warning, and we got the PCSID

4

In the production environment, we attempted yesterday to issue the CCSID. Previously, our system would stop the process whenever errors or warnings occurred, preventing it from proceeding to request the PCSID. We have now removed that restriction. However, we still haven’t tested proceeding when warnings are present.

5

Dear @Ankit.K.Tiwari @idaoud

We have recently started encountering a certificate warning in the production environment

Warning: X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.

Please note that we have already onboarded 500+ entities in production using the same steps, without facing this issue warning previously.

We have observed that this warning appears during compliance check calls for the following document types:

  • Simplified Invoice

  • Simplified Credit Note

  • Simplified Debit Note

We do have procedures in place to continue onboarding in case of such warnings, and we have successfully received the PCSID. However, since we also display these warnings to our customers, they are now requesting the root cause for this behavior.

To provide more context:

  • Environment: Production

  • CCSID Issuance Date: 08 October 2025

  • PCSID Received: Yes

  • CSR Invoice Type: 1100 (Standard & Simplified)

We would appreciate it if you could help identifying the root cause of this warning.

Do let us know if more information is required.

Best regards