Thumbprint in the token doesn't match any trusted providers. Possible cause is either the signing certificate is newly created ...