Users receive the following error message while trying to log in with a PIV card:

Certificate validation failed. Try again by quitting the browser then selecting another certificate.
 

• PIV card
• Certificate
• Sign-in
• Okta Classic Engine

This error generally occurs when one of the intermediate certificate authorities is missing from the certificate chain. Compare the certificate provided by the security team to the one uploaded to Okta and make sure the chain is complete and does not miss any intermediate Certificate Authority (CA). 

For example, a certificate uploaded to Okta may look like this:
 

However, the complete certificate chain may contain additional intermediate CAs:

 

As per the above screenshots, one of the intermediate certificate authorities is missing, which will cause certificate validation failure.