3505973 - Certificate based authentication request from IPS side returns an error "[AUTH0032]Invalid client certificate"

Instead of Basic Authentication, a certificate based authentication is set up in IPS>Source System for IPS sync job to read SF users.

However, when running the read job in IPS, it returns error 

Cannot execute provisioning job in tenant context: xxxxxxxxxx 
Caused by: Error during execution on behalf of tenant with ID: xxxxxxxxxx 
Caused by: Executing delta load failed. 
Caused by: HTTP operation failed invoking https://api15preview.cert.sapsf.cn/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20true with statusCode: 401 and body {"error":{"code":"AuthenticationFailed","message":"Authentication service failed to return token.","details":"[AUTH0032]Invalid client certificate"}} 
Caused by: HTTP operation failed invoking https://api15preview.cert.sapsf.cn/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20true with statusCode: 401, Response: {"error":{"code":"AuthenticationFailed","message":"Authentication service failed to return token.","details":"[AUTH0032]Invalid client certificate"}}

SAP SuccessFactors HCM Suite

[AUTH0032]Invalid client certificate, Client Certificate based authentication, Certificate, ClientCertificateAuthentication, AUTH0032, IPS, Read job failed, sf, IPS , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem