ID4174: Cannot create a ClaimsPrincipal from this HTTP context because the issuer of the X.509 client certificate was not ...

ID4174: Cannot create a ClaimsPrincipal from this HTTP context because the issuer of the X.509 client certificate was not recognized by the IssuerNameRegistry. To create a ClaimsPrincipal from this certificate, configure the IssuerNameRegistry to return a valid name for the certificate's issuer.