hi Donka,
Thanks for your reply. I have checked in the verify PSE and make sure that the only issuing certificate of gateway does exist in the verify PSE file with correct version. hence, the first and second point are not the root cause I think. Regarding the third point, we did not use other PSE for verification.
In the simple SAPSSOEXE scenario, the second and third point is not relevant I guess.
thanks,
Best regards,
Xian' an