We are observing an unexpected ZATCA warning for an online generated invoice generated. The warning typically appears only for offline invoices (SDK-signed), but in this case the invoice was created and signed fully online.
We would like to understand why ZATCA is returning ‘invalid-signing-certificate’ for an online invoice when:
The certificate corresponds to the correct VAT number.
The certificate matches the device.
The correct key pair is used.
The invoice is not an offline (SDK-signed) document.
“WarningList”: [ { “ErrorCode”: “invalid-signing-certificate”, “ErrorMessage”: “X509Certificate (CCSID / PCSID) used for signing is not valid certificate (CCSID / PCSID) for this VAT Registration Number.”, “ErrorSource”: “ZATCA” } ]
Thanks for your elaboration, Kindly share the following to the below mail, our technical team will review and response with the needed steps or schedule one to one meeting if needed:
CSR.
PCSID used for sign the XML.
Full payload for the request that contains the warning (request, response, Authorization)