When you try to use the Sign In option in a Direct Entitlement enabled DPS app, the viewer displays the following error:
"There was an error contacting the server. Please try again later."
There are various methods you can use to check. One way to check that the certificate chain is through a command prompt in the Mac Terminal with the following command:
openssl s_client -debug -connect
openssl s_client -debug -connect mycatalog.mydomain.com:443
It could show you information that indicates there are intermediary certificates you were not aware of.
Another method is to use an SSL checker like this one:
Enter the URL for your server and click check SSL, for example:
This report could provide useful information about certificate installation problems and solutions. The chain should show no problem indications and its end-point certificate's common name should match that of one on this list of accepted certificates for DPS direct entitlement communications: