The server cannot fetch your JWKS
What it means
Your JWKS URL is unreachable, not HTTPS, redirects, or is not valid JSON — the EHR fetches it from the public internet.
Fix
Serve the JWKS at a public HTTPS URL that returns 200 JSON without auth or redirects.
Check it with smart-doctor
Run your login and smart-doctor ranks this cause against the others, with the evidence it found.
npx smart-doctor check my-profileAlready have the server’s error? Explain it without running anything.
npx smart-doctor explain '{"error":"invalid_client"}'