Other ways to say the serviceworker for scope “%1$s” failed to decrypt a push message. the “dh” parameter in the “crypto-key” header must be the app server’s diffie-hellman public key, base64url-encoded (https://tools.ietf.org/html/rfc7515#appendix-c) and in “uncompressed” or “raw” form (65 bytes before encoding. see https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4 for more information.