When trying to call SharePoint Online APIs using Azure AD App-Only with Certificate Auth, the Access Denied exception was encountered. The issue was caused by the console app trying to create a key in the machinekeys folder without the necessary write access. Providing the write access resolved the issue and allowed the SharePoint Online APIs to be called successfully.
Login now to access my digest by 365.Training