Problem

--The new DEA SHA 256 certificates require new root and intermediate certificates.
--Gateway Interchange does not automatically download the full chain of trust for a given signing certificate.

Resolution

1) Download the certificates at http://www.deaecom.gov/certmanage.html :

Accept the Root CA 2 Cert SHA-2

Accept the CSOS Sub CA 3 Cert SHA-2

2) Then import them into your CSOS community profile's "Trusted root certificates" store. Or drop them into the build/conf/certs/DEA/Intermediate and DEA/Root directories.

** CSOS Sha256 certificate are supported since versions CSOS 5.8 SP13, CSOS 5.9 SP9, CSOS 5.10.0 SP11, CSOS 5.10.1 SP6