SIGNATURE_ERROR Web-based validator

when i sign fatoora using with my certificate api accept it (Reported) and the web-based validator return this error


but when i sign with the default zatca certificate it is accepted in both web-based validator and the api
and here is my invoice xml

<?xml version="1.0" encoding="UTF-8"?>

ext:UBLExtensions
ext:UBLExtension
ext:ExtensionURIurn:oasis:names:specification:ubl:dsig:enveloped:xades</ext:ExtensionURI>
ext:ExtensionContent
<sig:UBLDocumentSignatures xmlns:sig=“urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2” xmlns:sac=“urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2” xmlns:sbc=“urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2”>
sac:SignatureInformation
cbc:IDurn:oasis:names:specification:ubl:signature:1</cbc:ID>
sbc:ReferencedSignatureIDurn:oasis:names:specification:ubl:signature:Invoice</sbc:ReferencedSignatureID>
<ds:Signature xmlns:ds=“XML-Signature Syntax and Processing” Id=“signature”>
ds:SignedInfo
<ds:CanonicalizationMethod Algorithm=“Canonical XML 1.1”/>
<ds:SignatureMethod Algorithm=“xmldsig-more namespace”/>
<ds:Reference Id=“invoiceSignedData” URI=“”>
ds:Transforms
<ds:Transform Algorithm=“XML Path Language (XPath)”>
ds:XPathnot(//ancestor-or-self::ext:UBLExtensions)</ds:XPath>
</ds:Transform>
<ds:Transform Algorithm=“XML Path Language (XPath)”>
ds:XPathnot(//ancestor-or-self::cac:Signature)</ds:XPath>
</ds:Transform>
<ds:Transform Algorithm=“XML Path Language (XPath)”>
ds:XPathnot(//ancestor-or-self::cac:AdditionalDocumentReference[cbc:ID=‘QR’])</ds:XPath>
</ds:Transform>
<ds:Transform Algorithm=“Canonical XML 1.1”/>
</ds:Transforms>
<ds:DigestMethod Algorithm=“XML Encryption Syntax and Processing”/>
ds:DigestValueBkdN+hUJmX6WynEOJX5S8eb+DfqReJL74OOsq2CxMf0=</ds:DigestValue>
</ds:Reference>
<ds:Reference Type=“XML-Signature Syntax and Processing” URI=“#xadesSignedProperties”>
<ds:DigestMethod Algorithm=“XML Encryption Syntax and Processing”/>
ds:DigestValueNTc4Y2E1MTllMTJhNDYzY2NlNTE2MTBkYjllNmRkN2IyMDM4NDk1YWY2MWRhNjExY2Q5ZTljNzgyZTJlMWQwYw==</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
ds:SignatureValueMEUCIQDQG3ELwDOgq0th1noWdo66dMEYE2EcFZ0rw3tFkj+e8QIgMBlgtC2mbus1a+QM9XEq9GoUnmEhKMJFZ3TOhK3ns2U=</ds:SignatureValue>
ds:KeyInfo
ds:X509Data
ds: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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
ds:Object
<xades:QualifyingProperties xmlns:xades=“Assigned ETSI XML URIs” Target=“signature”>
<xades:SignedProperties Id=“xadesSignedProperties”>
xades:SignedSignatureProperties
xades:SigningTime2025-03-26T14:48:02</xades:SigningTime>
xades:SigningCertificate
xades:Cert
xades:CertDigest
<ds:DigestMethod Algorithm=“XML Encryption Syntax and Processing”/>
ds:DigestValueOGFjMGE0YTI4MDFkOGU5NTBlNmJlMWQ5NmNjMjlkYTM5YmI5YTA0NTRkMjQ5OWEyNjFhMzUwM2RjNzI4M2I5YQ==</ds:DigestValue>
</xades:CertDigest>
xades:IssuerSerial
ds:X509IssuerNameCN=PEZEINVOICESCA4-CA, DC=extgazt, DC=gov, DC=local</ds:X509IssuerName>
ds:X509SerialNumber2676089560252394695921070230059338843688036003</ds:X509SerialNumber>
</xades:IssuerSerial>
</xades:Cert>
</xades:SigningCertificate>
</xades:SignedSignatureProperties>
</xades:SignedProperties>
</xades:QualifyingProperties>
</ds:Object>
</ds:Signature>
</sac:SignatureInformation>
</sig:UBLDocumentSignatures>
</ext:ExtensionContent>
</ext:UBLExtension>
</ext:UBLExtensions>

<cbc:ProfileID>reporting:1.0</cbc:ProfileID>
<cbc:ID>SME00010</cbc:ID>
<cbc:UUID>8e6000cf-1a98-4174-b3e7-b5d5954bc10d</cbc:UUID>
<cbc:IssueDate>2025-03-26</cbc:IssueDate>
<cbc:IssueTime>17:41:08</cbc:IssueTime>
<cbc:InvoiceTypeCode name="0200000">388</cbc:InvoiceTypeCode>
<cbc:Note languageID="ar">ABC</cbc:Note>
<cbc:DocumentCurrencyCode>SAR</cbc:DocumentCurrencyCode>
<cbc:TaxCurrencyCode>SAR</cbc:TaxCurrencyCode>
<cac:AdditionalDocumentReference>
    <cbc:ID>ICV</cbc:ID>
    <cbc:UUID>10</cbc:UUID>
</cac:AdditionalDocumentReference>
<cac:AdditionalDocumentReference>
    <cbc:ID>PIH</cbc:ID>
    <cac:Attachment>
        <cbc:EmbeddedDocumentBinaryObject mimeCode="text/plain">NWZlY2ViNjZmZmM4NmYzOGQ5NTI3ODZjNmQ2OTZjNzljMmRiYzIzOWRkNGU5MWI0NjcyOWQ3M2EyN2ZiNTdlOQ==</cbc:EmbeddedDocumentBinaryObject>
    </cac:Attachment>
</cac:AdditionalDocumentReference>


<cac:AdditionalDocumentReference>
    <cbc:ID>QR</cbc:ID>
    <cac:Attachment>
        <cbc:EmbeddedDocumentBinaryObject mimeCode="text/plain">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</cbc:EmbeddedDocumentBinaryObject>
    </cac:Attachment>

</cac:AdditionalDocumentReference>cac:Signature
cbc:IDurn:oasis:names:specification:ubl:signature:Invoice</cbc:ID>
cbc:SignatureMethodurn:oasis:names:specification:ubl:dsig:enveloped:xades</cbc:SignatureMethod>
</cac:Signature>cac:AccountingSupplierParty
cac:Party
cac:PartyIdentification
<cbc:ID schemeID=“CRN”>1010010000</cbc:ID>
</cac:PartyIdentification>
cac:PostalAddress
cbc:StreetNameالامير سلطان | Prince Sultan</cbc:StreetName>
cbc:BuildingNumber2322</cbc:BuildingNumber>
cbc:CitySubdivisionNameالمربع | Al-Murabba</cbc:CitySubdivisionName>
cbc:CityNameالرياض | Riyadh</cbc:CityName>
cbc:PostalZone23333</cbc:PostalZone>
cac:Country
cbc:IdentificationCodeSA</cbc:IdentificationCode>
</cac:Country>
</cac:PostalAddress>
cac:PartyTaxScheme
cbc:CompanyID310051950300003</cbc:CompanyID>
cac:TaxScheme
cbc:IDVAT</cbc:ID>
</cac:TaxScheme>
</cac:PartyTaxScheme>
cac:PartyLegalEntity
cbc:RegistrationNameشركة توريد التكنولوجيا بأقصى سرعة المحدودة | Maximum Speed Tech Supply LTD</cbc:RegistrationName>
</cac:PartyLegalEntity>
</cac:Party>
</cac:AccountingSupplierParty>
cac:AccountingCustomerParty
cac:Party
cac:PostalAddress
cbc:StreetNameصلاح الدين | Salah Al-Din</cbc:StreetName>
cbc:BuildingNumber1111</cbc:BuildingNumber>
cbc:CitySubdivisionNameالمروج | Al-Murooj</cbc:CitySubdivisionName>
cbc:CityNameالرياض | Riyadh</cbc:CityName>
cbc:PostalZone12222</cbc:PostalZone>
cac:Country
cbc:IdentificationCodeSA</cbc:IdentificationCode>
</cac:Country>
</cac:PostalAddress>
cac:PartyTaxScheme
cbc:CompanyID399999999800003</cbc:CompanyID>
cac:TaxScheme
cbc:IDVAT</cbc:ID>
</cac:TaxScheme>
</cac:PartyTaxScheme>
cac:PartyLegalEntity
cbc:RegistrationNameشركة نماذج فاتورة المحدودة | Fatoora Samples LTD</cbc:RegistrationName>
</cac:PartyLegalEntity>
</cac:Party>
</cac:AccountingCustomerParty>
cac:PaymentMeans
cbc:PaymentMeansCode10</cbc:PaymentMeansCode>
</cac:PaymentMeans>
cac:AllowanceCharge
cbc:ChargeIndicatorfalse</cbc:ChargeIndicator>
cbc:AllowanceChargeReasondiscount</cbc:AllowanceChargeReason>
<cbc:Amount currencyID=“SAR”>0.00</cbc:Amount>
cac:TaxCategory
<cbc:ID schemeID=“UN/ECE 5305” schemeAgencyID=“6”>S</cbc:ID>
cbc:Percent15</cbc:Percent>
cac:TaxScheme
<cbc:ID schemeID=“UN/ECE 5153” schemeAgencyID=“6”>VAT</cbc:ID>
</cac:TaxScheme>
</cac:TaxCategory>
cac:TaxCategory
<cbc:ID schemeID=“UN/ECE 5305” schemeAgencyID=“6”>S</cbc:ID>
cbc:Percent15</cbc:Percent>
cac:TaxScheme
<cbc:ID schemeID=“UN/ECE 5153” schemeAgencyID=“6”>VAT</cbc:ID>
</cac:TaxScheme>
</cac:TaxCategory>
</cac:AllowanceCharge>
cac:TaxTotal
<cbc:TaxAmount currencyID=“SAR”>30.15</cbc:TaxAmount>
</cac:TaxTotal>
cac:TaxTotal
<cbc:TaxAmount currencyID=“SAR”>30.15</cbc:TaxAmount>
cac:TaxSubtotal
<cbc:TaxableAmount currencyID=“SAR”>201.00</cbc:TaxableAmount>
<cbc:TaxAmount currencyID=“SAR”>30.15</cbc:TaxAmount>
cac:TaxCategory
<cbc:ID schemeID=“UN/ECE 5305” schemeAgencyID=“6”>S</cbc:ID>
cbc:Percent15.00</cbc:Percent>
cac:TaxScheme
<cbc:ID schemeID=“UN/ECE 5153” schemeAgencyID=“6”>VAT</cbc:ID>
</cac:TaxScheme>
</cac:TaxCategory>
</cac:TaxSubtotal>
</cac:TaxTotal>
cac:LegalMonetaryTotal
<cbc:LineExtensionAmount currencyID=“SAR”>201.00</cbc:LineExtensionAmount>
<cbc:TaxExclusiveAmount currencyID=“SAR”>201.00</cbc:TaxExclusiveAmount>
<cbc:TaxInclusiveAmount currencyID=“SAR”>231.15</cbc:TaxInclusiveAmount>
<cbc:AllowanceTotalAmount currencyID=“SAR”>0.00</cbc:AllowanceTotalAmount>
<cbc:PrepaidAmount currencyID=“SAR”>0.00</cbc:PrepaidAmount>
<cbc:PayableAmount currencyID=“SAR”>231.15</cbc:PayableAmount>
</cac:LegalMonetaryTotal>
cac:InvoiceLine
cbc:ID1</cbc:ID>
<cbc:InvoicedQuantity unitCode=“PCE”>33.000000</cbc:InvoicedQuantity>
<cbc:LineExtensionAmount currencyID=“SAR”>99.00</cbc:LineExtensionAmount>
cac:TaxTotal
<cbc:TaxAmount currencyID=“SAR”>14.85</cbc:TaxAmount>
<cbc:RoundingAmount currencyID=“SAR”>113.85</cbc:RoundingAmount>
</cac:TaxTotal>
cac:Item
cbc:Nameكتاب</cbc:Name>
cac:ClassifiedTaxCategory
cbc:IDS</cbc:ID>
cbc:Percent15.00</cbc:Percent>
cac:TaxScheme
cbc:IDVAT</cbc:ID>
</cac:TaxScheme>
</cac:ClassifiedTaxCategory>
</cac:Item>
cac:Price
<cbc:PriceAmount currencyID=“SAR”>3.00</cbc:PriceAmount>
cac:AllowanceCharge
cbc:ChargeIndicatortrue</cbc:ChargeIndicator>
cbc:AllowanceChargeReasondiscount</cbc:AllowanceChargeReason>
<cbc:Amount currencyID=“SAR”>0.00</cbc:Amount>
</cac:AllowanceCharge>
</cac:Price>
</cac:InvoiceLine>
cac:InvoiceLine
cbc:ID2</cbc:ID>
<cbc:InvoicedQuantity unitCode=“PCE”>3.000000</cbc:InvoicedQuantity>
<cbc:LineExtensionAmount currencyID=“SAR”>102.00</cbc:LineExtensionAmount>
cac:TaxTotal
<cbc:TaxAmount currencyID=“SAR”>15.30</cbc:TaxAmount>
<cbc:RoundingAmount currencyID=“SAR”>117.30</cbc:RoundingAmount>
</cac:TaxTotal>
cac:Item
cbc:Nameقلم</cbc:Name>
cac:ClassifiedTaxCategory
cbc:IDS</cbc:ID>
cbc:Percent15.00</cbc:Percent>
cac:TaxScheme
cbc:IDVAT</cbc:ID>
</cac:TaxScheme>
</cac:ClassifiedTaxCategory>
</cac:Item>
cac:Price
<cbc:PriceAmount currencyID=“SAR”>34.00</cbc:PriceAmount>
cac:AllowanceCharge
cbc:ChargeIndicatortrue</cbc:ChargeIndicator>
cbc:AllowanceChargeReasondiscount</cbc:AllowanceChargeReason>
<cbc:Amount currencyID=“SAR”>0.00</cbc:Amount>
</cac:AllowanceCharge>
</cac:Price>
</cac:InvoiceLine>

Dear @eslam99 ,

this is normal behavior as the validation certificate (in the backend of the web based validator) is different than the certificate used to sign your invoice.

So please rely on the API response or SDK validation ensuring the same certificate places in the certificate place holder in the following path: data/certificates/cert.pem

Regards,