saml2 invalid signature

I am trying to integrate with Ping Federate and Idp is successfully sending signed saml2 response to WordPress. Plugin is complaining about signature validation but I can’t see any debugging logs!

X509 certificate is valid and verified the exported cert.

Any comment on how to debug from WordPress side?

https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/