To resolve the issue, I added the Gandi certificate of the F5 load balancer to the backend API if the certificate is publicly signed by Gandi. Initially, I thought it should have been the gateway certificate or the Keycloak certificate, but it turned out that the F5 certificate was actually the one needed.