"Authentication Failure" Issue on most devices.

Question

I'm getting an "Authentication Failure" when installing my J2ME app OTA to most devices I've tried, including Pantech, Samsung, and Nokia ones (all AT&T or unlocked). I've included my (censored) JAD file below.
The entire application downloads to the device, and I can view the certificate info and there are three Thawte certificates, as expected.
All http reference exists.
The Thawte Root Certificate is present on the device.
I signed the JAD during NetBeans build by choosing so in the Signing section of the project properties.
I've tried using jarsigner in lieu of and in addition to the NetBeans method.
I've experimented with various MIDlet-Permissions as required/optional, and including/excluding various JAD parameters like MIDlet-Data-Size.
I've even tried desperate things like changing the CLDC/MIDP config, messing with the version number, and changing the icon file type.
I've read dozens on posts on the subject and I am really stumped. Thanks in advance for any assistance.
MIDlet-1: Example,http://www.example.com/dist/desktop_32.png,com.example.mobile.view.View
MIDlet-Certificate-1-1: (removed)
MIDlet-Certificate-1-2: (removed)
MIDlet-Certificate-1-3: (removed)
MIDlet-Data-Size: 3000000
MIDlet-Description: App Description
MIDlet-Icon: http://www.example.com/dist/desktop_32.png
MIDlet-Info-URL: http://www.example.com/help.php
MIDlet-Jar-RSA-SHA1: (removed)
MIDlet-Jar-Size: 148060
MIDlet-Jar-URL: http://www.example.com/test/ExampleMobile.jar
MIDlet-Name: ExampleMobile
MIDlet-Permissions-Opt: javax.microedition.io.Connector.file.read, javax.microedition.io.Connector.file.write, javax.microedition.io.Connector.https, javax.microedition.io.Connector.http, javax.microedition.pim.ContactList.read, javax.microedition.pim.ContactList.write, javax.microedition.pim.EventList.read, javax.microedition.pim.EventList.write, javax.microedition.location.Location
MIDlet-Vendor: Example
MIDlet-Version: 0.2.18
MicroEdition-Configuration: CLDC-1.1
MicroEdition-Profile: MIDP-2.0

Answer 1

one of the stupid reason of the invalid descriptor (ota 907) in samsung : (to my opinion samsung is just a visual device, has buggy implementations and lack of documentation, comparing to nokia and sony ericsson)
if you specify an https url in jad for "midlet-jar-url", then samsung gives this error.
And why? i don't know, anybody doesnot know.
No documentation.
Read midp specs and no such a thing.
Read samsung docs if you find any, no result.
And you spend your time for stupid samsung issues, again.
Anyway, look at this, the problem can be resolved as :
Here is a typical jad runs on nokia devices well and fails with 907 in samsung:
MIDlet-1: Test OTP, /smlogo.png, testMIDlet
MIDlet-Icon: /smlogo.png
MIDlet-Jar-Size: 39122
MIDlet-Name: Test OTP
MIDlet-Vendor: None
MIDlet-Version: 2.12
Manifest-Version: 1.0
MicroEdition-Configuration: CLDC-1.0
MicroEdition-Profile: MIDP-2.0
MIDlet-Jar-URL: https://xx/wap/midlet/xx.jad
MIDlet-Install-Notify: https://xx/wap/notify.jsk?jaduid=123
MIDlet-Delete-Notify: https://xx/wap/notify.jsk?jaduid=123
and if you change https into http, then it runs well.
All is this.