Seems like the comment cannot parse the markdown, so I put my comments in the next Answer section, could you help to take a look? Thank you!

I see, we will try to test it on an old simulator. At the same time, I would like to check if you could help us to check the error details (e.g. Missing any parts, Structure isn't correct, etc)? so that we could have a direction to adjust our cert's generation. BTW, for the different result of the same command between Linux and Mac, did you get a chance to take a look? I am not sure if this is related.