Sorted:

AADSTS50146: This application is required to be configured with an application-specific signing key

Tricks for Determining the Tenant ID from an AAD Domain

Utilizing PowerShell for Testing the Client Credential Flow with Certificate

SAML Protocol Terminologies

Converting Timestamp Claim to Readable Timestamp in JWT Tokens