SAP Knowledge Base Article - Public

2940683 - Trusted Certification Authorities List for Client Certificates in C4C and BYD

Symptom

The following table contains the trusted certification authorities for client certificates (x.509) to be used in SAP Cloud for Customer and SAP Business ByDesign.

Environment

SAP Cloud for Customer

SAP Business ByDesign

Resolution

Approved Root CAs

CA Display Name

Subject

Serial Number

Fingerprint SHA-1

Expiry Date

MM-DD-YYYY

File name of certificate comments, if any

1

Comodo RSA Certification Authority

CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, SP=Greater Manchester, C=GB

4c aa f9 ca db 63 6f e0 1f f7 4e d8 5b 03 86 9d

‎af e5 d2 44 a8 d1 19 42 30 ff 47 9f e2 f8 97 bb cd 7a 8c b4

01-19-2038

COMODO RSA Certification Authority.cer

2

Starfield Class 2 Certification Authority

OU=Starfield Class 2 Certification Authority, O=Starfield Technologies, Inc., C=US

00

‎ad 7e 1c 28 b0 64 ef 8f 60 03 40 20 14 c3 d0 e3 37 0e b5 8a

‎06-29-2034

Starfield Class 2 CA.cer

3

Starfield Services Root Certificate Authority - G2

CN=Starfield Services Root Certificate Authority - G2, O=Starfield Technologies, Inc., L=Scottsdale, S=Arizona, C=US

00

92 5a 8f 8d 2c 6d 04 e0 66 5f 59 6a ff 22 d8 63 e8 25 6f 3f

01-01-2038

Starfield Services Root CA G2.cer

Additionally, cross-certified by “Starfield Class 2 Certification Authority”

4

SAP Cloud Root CA

CN=SAP Cloud Root CA, O=SAP SE, L=Walldorf, C=DE

18 77 0f be 65 06 6b bf 4c ea 93 38 d9 b1 85 62

‎6d 80 92 77 4a f2 d5 ed ae 3a 5c 99 d6 56 93 1c 21 97 a9 50

02-13-‎‎2039

SAP Cloud Root CA.cer

5

SAP Global Root CA

CN=SAP Global Root CA, O=SAP AG, L=Walldorf, C=DE

‎5d 03 d9 3d 31 61 5d 8f 48 8b 39 70 c7 8f 1b 99

‎0a b6 2a f4 7f e5 59 84 7d 79 8a 1f c4 e1 7f 67 fd 7e 82 4c

04-26-‎2032

SAP Global Root CA.cer

6

SAP Internet of Things CA

CN=SAP Internet of Things CA, O=SAP IoT Trust Community II, C=DE

00

‎45 53 d3 f2 22 58 fe 35 59 b1 84 9f 27 3b 8c 69 c2 4c fa 15

07-18-2040

SAP Internet of Things CA.cer

7

Baltimore CyberTrust Root

CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE

‎02 00 00 b9

d4 de 20 d0 5e 66 fc 53 fe a 50 88 2c 78 db 28 52 ca e4 74

05-13-‎‎2025

Baltimore CyberTrust Root.cer

8

Certum CA

CN=Certum CA, O=Unizeto Sp. z o.o., C=PL

01 00 20

‎62 52 dc 40 f7 11 43 a2 2f de 9e f7 34 8e 06 42 51 b1 81 18

06-11-‎2027

Certum CA.cer

9

COMODO Certification Authority

CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, SP=Greater Manchester, C=GB

20 a4 c4 7f dd df e1 c7 53 63 07 13 88 77 60 12

ee 86 93 87 ff fd 83 49 ab 5a d1 43 22 58 87 89 a4 57 b0 12

01-01-‎‎‎2031

COMODO Certification Authority.cer

10

DigiCert Assured ID Root CA

CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

‎0c e7 e0 e5 17 d8 46 fe 8f e5 60 fc 1b f0 30 39

‎05 63 b8 63 0d 62 d7 5a bb c8 ab 1e 4b df b5 a8 99 b2 4d 43

11-10-‎‎2031

DigiCert Assured ID Root CA.cer

11

DigiCert Global Root CA

CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

08 3b e0 56 90 42 46 b1 a1 75 6a c9 59 91 c7 4a

‎a8 98 5d 3a 65 e5 e5 c4 b2 d7 d6 6d 40 c6 dd 2f b1 9c 54 36

11-10-‎‎2031

DigiCert Global Root CA.cer

12

DigiCert Global Root G2

CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US

03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5

‎df 3c 24 f9 bf d6 66 76 1b 26 80 73 fe 06 d1 cc 8d 4f 82 a4

01-15-‎‎‎2038

DigiCert Global Root G2.cer

13

DigiCert High Assurance EV Root CA

CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

‎02 ac 5c 26 6a 0b 40 9b 8f 0b 79 f2 ae 46 25 77

‎5f b7 ee 06 33 e2 59 db ad 0c 4c 9a e6 d3 8f 1a 61 c7 dc 25

11-10-‎‎2031

DigiCert High Assurance EV Root CA.cer

14

Entrust Root Certification Authority - G2

CN=Entrust Root Certification Authority - G2, OU=(c) 2009 Entrust, Inc. - for authorized use only

OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US

‎4a 53 8c 28

‎8c f4 27 fd 79 0c 3a d1 66 06 8d e8 1e 57 ef bb 93 22 72 d4

‎12-07-‎2030

Entrust Root Certification Authority - G2.cer

15

Entrust Root Certification Authority

CN=Entrust Root Certification Authority, OU=(c) 2006 Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, O=Entrust, Inc., C=US

‎45 6b 50 54

‎b3 1e b1 b7 40 e3 6c 84 02 da dc 37 d4 4d f5 d4 67 49 52 f9

11-27-‎‎2026

Entrust Root Certification Authority.cer

16

Entrust.net Certification Authority (2048)

CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/

CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net

‎38 63 de f8

‎50 30 06 09 1d 97 d4 f5 ae 39 f7 cb e7 92 7d 7d 65 2d 34 31

07-24-‎2029

Entrust.net Certification Authority (2048).cer

17

GlobalSign Root CA - R3

CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3

‎04 00 00 00 00 01 21 58 53 08 a2

‎d6 9b 56 11 48 f0 1c 77 c5 45 78 c1 09 26 df 5b 85 69 76 ad

03-18-‎‎2029

GlobalSign Root CA - R3 .cer

18

GlobalSign Root CA

CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE

04 00 00 00 00 01 15 4b 5a c3 94

‎b1 bc 96 8b d4 f4 9d 62 2a a8 9a 81 f2 15 01 52 a4 1d 82 9c

01-28-‎2028

GlobalSign Root CA.cer

19

Go Daddy Class 2 Certification Authority

OU=Go Daddy Class 2 Certification Authority, O=The Go Daddy Group, Inc., C=US

00

‎27 96 ba e6 3f 18 01 e2 77 26 1b a0 d7 77 70 02 8f 20 ee e4

06-29-‎2034

Go Daddy Class 2 Certification Authority.cer

20

Go Daddy Root Certificate Authority - G2

CN=Go Daddy Root Certificate Authority - G2, O=GoDaddy.com, Inc., L=Scottsdale, S=Arizona, C=US

00

‎47 be ab c9 22 ea e8 0e 78 78 34 62 a7 9f 45 c2 54 fd e6 8b

01-01-‎2038

Go Daddy Root Certificate Authority - G2.cer

21

USERTrust RSA Certification Authority

CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US

‎01 fd 6d 30 fc a3 ca 51 a8 1b bc 64 0e 35 03 2d

‎2b 8f 1b 57 33 0d bb a2 d0 7a 6c 51 f7 0e e9 0d da b9 ad 8e

01-19-‎2038

USERTrust RSA Certification Authority.cer

There is also a crossed-signed (interme­diate) certificate signed by “AddTrust External CA Root”

22

QuoVadis Root CA 2 G3

CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM

‎44 57 34 24 5b 81 89 9b 35 f2 ce b8 2b 3b 5b a7 26 f0 75 28

‎09 3c 61 f3 8b 8b dc 7d 55 df 75 38 02 05 00 e1 25 f5 c8 36

01-12-‎‎2042

QuoVadis Root CA 2 G3.cer

DigiCert purchased QuoVadis, on Jan 17th 2019

23

QuoVadis Root CA 2

CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM

‎05 09

‎ca 3a fb cf 12 40 36 4b 44 b2 16 20 88 80 48 39 19 93 7c f7

11-24-‎‎2031

QuoVadis Root CA 2.cer

DigiCert purchased QuoVadis, on Jan 17th 2019

24

SwissSign Gold CA - G2

CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH

00 bb 40 1c 43 f5 5e 4f b0

‎d8 c5 38 8a b7 30 1b 1b 6e d4 7a e6 45 25 3a 6f 9f 1a 27 61

10-25-2036

SwissSign Gold CA - G2.cer

25

SwissSign Platinum CA - G2

CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH

‎4e b2 00 67 0c 03 5d 4f

‎56 e0 fa c0 3b 8f 18 23 55 18 e5 d3 11 ca e8 c2 43 31 ab 66

10-25-2036

SwissSign Platinum CA - G2.cer

26

SwissSign Silver CA - G2

CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH

4f 1b d4 2f 54 bb 2f 4b

‎9b aa e5 9f 56 ee 21 cb 43 5a be 25 93 df a7 f0 40 d1 1d cb

10-25-2036

SwissSign Silver CA - G2.cer

27

Amazon Root CA 1

CN=Amazon Root CA 1, O=Amazon, C=US

06 6c 9f cf 99 bf 8c 0a 39 e2 f0 78 8a 43 e6 96 36 5b ca

‎8d a7 f9 65 ec 5e fc 37 91 0f 1c 6e 59 fd c1 cc 6a 6e de 16

01-17-‎2038

Amazon Root CA 1.cer

28

T-TeleSec GlobalRoot Class 2

CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C= DE

01

59 0d 2d 7d 88 4f 40 2e 61 7e a5 62 32 17 65 cf 17 d8 94 e9

10-02-‎2033

T-TeleSec GlobalRoot Class 2.cer

29

ISRG Root X1

CN = ISRG Root X1, O = Internet Security Research Group, C = US

00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00

ca bd 2a 79 a1 07 6a 31 f2 1d 25 36 35 cb 03 9d 43 29 a5 e8

06-04-2035

isrgrootx1.cer

30

Atos TrustedRoot 2011

CN = Atos TrustedRoot 2011, O = Atos, C = DE

5c 33 cb 62 2c 5f b3 32

2B B1 F5 3E 55 0C 1D C5 F1 D4 E6 B7 6A 46 4B 55 06 02 AC 21

01-01-2031

Atos TrustedRoot 2011.cer

31

GlobalSign Root R4

OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign

02 03 e5 7e f5 3f 93 fd a5 09 21 b2 a6

6b a0 b0 98 e1 71 ef 5a ad fe 48 15 80 77 10 f4 bd 6f 0b 28

01-19-2038

GlobalSign ECC Root CA - R4.cer

“GlobalSign Root R4” was sold to Google in August 2016.

32

GTS Root R1

C = US, O = Google Trust Services LLC, CN = GTS Root R1

02 03 e5 93 6f 31 b0 13 49 88 6b a2 17

e5 8c 1c c4 91 3b 38 63 4b e9 10 6e e3 ad 8e 6b 9d d9 81 4a

06-22-2036

GTS Root R1.cer

33

GTS Root R2

C = US, O = Google Trust Services LLC, CN = GTS Root R2

02 03 e5 ae c5 8d 04 25 1a ab 11 25 aa

9a 44 49 76 32 db de fa d0 bc fb 5a 7b 17 bd 9e 56 09 24 94

06-22-2036

GTS Root R2.cer

34

GTS Root R3

C = US, O = Google Trust Services LLC, CN = GTS Root R3

02 03 e5 b8 82 eb 20 f8 25 27 6d 3d 66

ed e5 71 80 2b c8 92 b9 5b 83 3c d2 32 68 3f 09 cd a0 1e 46

06-22-2036

GTS Root R3.cer

35

GTS Root R4

C = US, O = Google Trust Services LLC, CN = GTS Root R4

02 03 e5 c0 68 ef 63 1a 9c 72 90 50 52

77 d3 03 67 b5 e0 0c 15 f6 0c 38 61 df 7c e1 3b 92 46 4d 47

06-22-2036

GTS Root R4.cer

36

COMODO ECC Certification Authority

CN = COMODO ECC Certification Authority, O = COMODO CA Limited, L = Salford, S = Greater Manchester, C = GB

1f47afaa62007050544c019e9b63992a

9f744e9f2b4dbaec0f312c50b6563b8e2d93c311

01-19-2038

COMODO ECC Certification Authority.cer

37

ISRG Root X2

CN = ISRG Root X2, O = Internet Security Research Group, C = US

41d29dd172eaeea780c12c6ce92f8752

bdb1b93cd5978d45c6261455f8db95c75ad153af

09-17-2040

ISRG Root X2.cer

38

certSIGN ROOT CA

OU = certSIGN ROOT CA, O = certSIGN, C = RO

200605167002

fab7ee36972662fb2db02af6bf03fde87c4b2f9b

07-04-2031

certSIGN ROOT CA.cer

39

DigiCert Assured ID Root G2

CN = DigiCert Assured ID Root G2, OU = www.digicert.com, O = DigiCert Inc, C = US

0b 93 1c 3a d6 39 67 ea 67 23 bf c3 af 9a f4 4b

a1 4b 48 d9 43 ee 0a 0e 40 90 4f 3c e0 a4 c0 91 93 51 5d 3f

‎01-15-‎2038

DigiCert Assured ID Root G2.cer

40

DigiCert Assured ID Root G3

CN = DigiCert Assured ID Root G3, OU = www.digicert.com, O = DigiCert Inc, C = US

0b a1 5a fa 1d df a0 b5 49 44 af cd 24 a0 6c ec

f5 17 a2 4f 9a 48 c6 c9 f8 a2 00 26 9f dc 0f 48 2c ab 30 89

‎01-15-‎2038

DigiCert Assured ID Root G3.cer

41

DigiCert Global Root G3

CN = DigiCert Global Root G3, OU = www.digicert.com, O = DigiCert Inc, C = US

05 55 56 bc f2 5e a4 35 35 c3 a4 0f d5 ab 45 72

7e 04 de 89 6a 3e 66 6d 00 e6 87 d3 3f fa d9 3b e8 3d 34 9e

‎01-15-‎2038

DigiCert Global Root G3.cer

See Also

3446646 - Renewal of SAP Passport CA certificate - SAP Business ByDesign

3336913 - Tenant Certificate Details in SAP Business ByDesign

3512176 - Domain Certificate Renewal *businessbydesign.cloud.sap and *sapbydesign.com

3679342 - You Receive a Notification Regarding Renewal of ByD Mandate User Certificate (M-User) From SAP


Security Guide for SAP Business ByDesign

Cloud for Customer Client Certificate (X.509)

Keywords

client certificates, trusted certification authorities. , KBA , SRD-CC-SEC , Security , How To

Product

SAP Business ByDesign all versions ; SAP Cloud for Customer add-ins all versions