Other ways to say the serviceworker for scope ‘%1$s’ failed to decrypt a push message. the ‘dh‘ parameter in the ‘crypto-key‘ header must be the app server’s diffie-hellman public key, base64url-encoded (https://tools.ietf.org/html/rfc7515#appendix-c) and in “uncompressed” or “raw” form (65 bytes before encoding). see https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4 for more information.