Symptom
The following table contains the trusted certification authorities for client certificates (x.509) to be used in SAP Cloud for Customer and SAP Business ByDesign.
Environment
SAP Cloud for Customer
SAP Business ByDesign
Resolution
|
CA Display Name |
Subject |
Serial Number |
Fingerprint SHA-1 |
Expiry Date MM-DD-YYYY |
File name of certificate comments, if any |
|---|
|
1 |
Comodo RSA Certification Authority |
CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, SP=Greater Manchester, C=GB |
4c aa f9 ca db 63 6f e0 1f f7 4e d8 5b 03 86 9d |
af e5 d2 44 a8 d1 19 42 30 ff 47 9f e2 f8 97 bb cd 7a 8c b4 |
01-19-2038 |
COMODO RSA Certification Authority.cer |
|
2 |
Starfield Class 2 Certification Authority |
OU=Starfield Class 2 Certification Authority, O=Starfield Technologies, Inc., C=US |
00 |
ad 7e 1c 28 b0 64 ef 8f 60 03 40 20 14 c3 d0 e3 37 0e b5 8a |
06-29-2034 |
Starfield Class 2 CA.cer |
|
3 |
Starfield Services Root Certificate Authority - G2 |
CN=Starfield Services Root Certificate Authority - G2, O=Starfield Technologies, Inc., L=Scottsdale, S=Arizona, C=US |
00 |
92 5a 8f 8d 2c 6d 04 e0 66 5f 59 6a ff 22 d8 63 e8 25 6f 3f |
01-01-2038 |
Starfield Services Root CA G2.cer Additionally, cross-certified by “Starfield Class 2 Certification Authority” |
|
4 |
SAP Cloud Root CA |
CN=SAP Cloud Root CA, O=SAP SE, L=Walldorf, C=DE |
18 77 0f be 65 06 6b bf 4c ea 93 38 d9 b1 85 62 |
6d 80 92 77 4a f2 d5 ed ae 3a 5c 99 d6 56 93 1c 21 97 a9 50 |
02-13-2039 |
SAP Cloud Root CA.cer |
|
5 |
SAP Global Root CA |
CN=SAP Global Root CA, O=SAP AG, L=Walldorf, C=DE |
5d 03 d9 3d 31 61 5d 8f 48 8b 39 70 c7 8f 1b 99 |
0a b6 2a f4 7f e5 59 84 7d 79 8a 1f c4 e1 7f 67 fd 7e 82 4c |
04-26-2032 |
SAP Global Root CA.cer |
|
6 |
SAP Internet of Things CA |
CN=SAP Internet of Things CA, O=SAP IoT Trust Community II, C=DE |
00 |
45 53 d3 f2 22 58 fe 35 59 b1 84 9f 27 3b 8c 69 c2 4c fa 15 |
07-18-2040 |
SAP Internet of Things CA.cer |
|
7 |
Baltimore CyberTrust Root |
CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE |
02 00 00 b9 |
d4 de 20 d0 5e 66 fc 53 fe a 50 88 2c 78 db 28 52 ca e4 74 |
05-13-2025 |
Baltimore CyberTrust Root.cer |
|
8 |
Certum CA |
CN=Certum CA, O=Unizeto Sp. z o.o., C=PL |
01 00 20 |
62 52 dc 40 f7 11 43 a2 2f de 9e f7 34 8e 06 42 51 b1 81 18 |
06-11-2027 |
Certum CA.cer |
|
9 |
COMODO Certification Authority |
CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, SP=Greater Manchester, C=GB |
20 a4 c4 7f dd df e1 c7 53 63 07 13 88 77 60 12 |
ee 86 93 87 ff fd 83 49 ab 5a d1 43 22 58 87 89 a4 57 b0 12 |
01-01-2031 |
COMODO Certification Authority.cer |
|
10 |
DigiCert Assured ID Root CA |
CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
0c e7 e0 e5 17 d8 46 fe 8f e5 60 fc 1b f0 30 39 |
05 63 b8 63 0d 62 d7 5a bb c8 ab 1e 4b df b5 a8 99 b2 4d 43 |
11-10-2031 |
DigiCert Assured ID Root CA.cer |
|
11 |
DigiCert Global Root CA |
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
08 3b e0 56 90 42 46 b1 a1 75 6a c9 59 91 c7 4a |
a8 98 5d 3a 65 e5 e5 c4 b2 d7 d6 6d 40 c6 dd 2f b1 9c 54 36 |
11-10-2031 |
DigiCert Global Root CA.cer |
|
12 |
DigiCert Global Root G2 |
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US |
03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5 |
df 3c 24 f9 bf d6 66 76 1b 26 80 73 fe 06 d1 cc 8d 4f 82 a4 |
01-15-2038 |
DigiCert Global Root G2.cer |
|
13 |
DigiCert High Assurance EV Root CA |
CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US |
02 ac 5c 26 6a 0b 40 9b 8f 0b 79 f2 ae 46 25 77 |
5f b7 ee 06 33 e2 59 db ad 0c 4c 9a e6 d3 8f 1a 61 c7 dc 25 |
11-10-2031 |
DigiCert High Assurance EV Root CA.cer |
|
14 |
Entrust Root Certification Authority - G2 |
CN=Entrust Root Certification Authority - G2, OU=(c) 2009 Entrust, Inc. - for authorized use only OU=See www.entrust.net/legal-terms, O=Entrust, Inc., C=US |
4a 53 8c 28 |
8c f4 27 fd 79 0c 3a d1 66 06 8d e8 1e 57 ef bb 93 22 72 d4 |
12-07-2030 |
Entrust Root Certification Authority - G2.cer |
|
15 |
Entrust Root Certification Authority |
CN=Entrust Root Certification Authority, OU=(c) 2006 Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, O=Entrust, Inc., C=US |
45 6b 50 54 |
b3 1e b1 b7 40 e3 6c 84 02 da dc 37 d4 4d f5 d4 67 49 52 f9 |
11-27-2026 |
Entrust Root Certification Authority.cer |
|
16 |
Entrust.net Certification Authority (2048) |
CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/ CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net |
38 63 de f8 |
50 30 06 09 1d 97 d4 f5 ae 39 f7 cb e7 92 7d 7d 65 2d 34 31 |
07-24-2029 |
Entrust.net Certification Authority (2048).cer |
|
17 |
GlobalSign Root CA - R3 |
CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3 |
04 00 00 00 00 01 21 58 53 08 a2 |
d6 9b 56 11 48 f0 1c 77 c5 45 78 c1 09 26 df 5b 85 69 76 ad |
03-18-2029 |
GlobalSign Root CA - R3 .cer |
|
18 |
GlobalSign Root CA |
CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE |
04 00 00 00 00 01 15 4b 5a c3 94 |
b1 bc 96 8b d4 f4 9d 62 2a a8 9a 81 f2 15 01 52 a4 1d 82 9c |
01-28-2028 |
GlobalSign Root CA.cer |
|
19 |
Go Daddy Class 2 Certification Authority |
OU=Go Daddy Class 2 Certification Authority, O=The Go Daddy Group, Inc., C=US |
00 |
27 96 ba e6 3f 18 01 e2 77 26 1b a0 d7 77 70 02 8f 20 ee e4 |
06-29-2034 |
Go Daddy Class 2 Certification Authority.cer |
|
20 |
Go Daddy Root Certificate Authority - G2 |
CN=Go Daddy Root Certificate Authority - G2, O=GoDaddy.com, Inc., L=Scottsdale, S=Arizona, C=US |
00 |
47 be ab c9 22 ea e8 0e 78 78 34 62 a7 9f 45 c2 54 fd e6 8b |
01-01-2038 |
Go Daddy Root Certificate Authority - G2.cer |
|
21 |
USERTrust RSA Certification Authority |
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US |
01 fd 6d 30 fc a3 ca 51 a8 1b bc 64 0e 35 03 2d |
2b 8f 1b 57 33 0d bb a2 d0 7a 6c 51 f7 0e e9 0d da b9 ad 8e |
01-19-2038 |
USERTrust RSA Certification Authority.cer There is also a crossed-signed (intermediate) certificate signed by “AddTrust External CA Root” |
|
22 |
QuoVadis Root CA 2 G3 |
CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM |
44 57 34 24 5b 81 89 9b 35 f2 ce b8 2b 3b 5b a7 26 f0 75 28 |
09 3c 61 f3 8b 8b dc 7d 55 df 75 38 02 05 00 e1 25 f5 c8 36 |
01-12-2042 |
QuoVadis Root CA 2 G3.cer DigiCert purchased QuoVadis, on Jan 17th 2019 |
|
23 |
QuoVadis Root CA 2 |
CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM |
05 09 |
ca 3a fb cf 12 40 36 4b 44 b2 16 20 88 80 48 39 19 93 7c f7 |
11-24-2031 |
QuoVadis Root CA 2.cer DigiCert purchased QuoVadis, on Jan 17th 2019 |
|
24 |
SwissSign Gold CA - G2 |
CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH |
00 bb 40 1c 43 f5 5e 4f b0 |
d8 c5 38 8a b7 30 1b 1b 6e d4 7a e6 45 25 3a 6f 9f 1a 27 61 |
10-25-2036 |
SwissSign Gold CA - G2.cer |
|
25 |
SwissSign Platinum CA - G2 |
CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH |
4e b2 00 67 0c 03 5d 4f |
56 e0 fa c0 3b 8f 18 23 55 18 e5 d3 11 ca e8 c2 43 31 ab 66 |
10-25-2036 |
SwissSign Platinum CA - G2.cer |
|
26 |
SwissSign Silver CA - G2 |
CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH |
4f 1b d4 2f 54 bb 2f 4b |
9b aa e5 9f 56 ee 21 cb 43 5a be 25 93 df a7 f0 40 d1 1d cb |
10-25-2036 |
SwissSign Silver CA - G2.cer |
|
27 |
Amazon Root CA 1 |
CN=Amazon Root CA 1, O=Amazon, C=US |
06 6c 9f cf 99 bf 8c 0a 39 e2 f0 78 8a 43 e6 96 36 5b ca |
8d a7 f9 65 ec 5e fc 37 91 0f 1c 6e 59 fd c1 cc 6a 6e de 16 |
01-17-2038 |
Amazon Root CA 1.cer |
|
28 |
T-TeleSec GlobalRoot Class 2 |
CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C= DE |
01 |
59 0d 2d 7d 88 4f 40 2e 61 7e a5 62 32 17 65 cf 17 d8 94 e9 |
10-02-2033 |
T-TeleSec GlobalRoot Class 2.cer |
|
29 |
ISRG Root X1 |
CN = ISRG Root X1, O = Internet Security Research Group, C = US |
00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00 |
ca bd 2a 79 a1 07 6a 31 f2 1d 25 36 35 cb 03 9d 43 29 a5 e8 |
06-04-2035 |
isrgrootx1.cer |
|
30 |
Atos TrustedRoot 2011 |
CN = Atos TrustedRoot 2011, O = Atos, C = DE |
5c 33 cb 62 2c 5f b3 32 |
2B B1 F5 3E 55 0C 1D C5 F1 D4 E6 B7 6A 46 4B 55 06 02 AC 21 |
01-01-2031 |
Atos TrustedRoot 2011.cer |
|
31 |
GlobalSign Root R4 |
OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign |
02 03 e5 7e f5 3f 93 fd a5 09 21 b2 a6 |
6b a0 b0 98 e1 71 ef 5a ad fe 48 15 80 77 10 f4 bd 6f 0b 28 |
01-19-2038 |
GlobalSign ECC Root CA - R4.cer “GlobalSign Root R4” was sold to Google in August 2016. |
|
32 |
GTS Root R1 |
C = US, O = Google Trust Services LLC, CN = GTS Root R1 |
02 03 e5 93 6f 31 b0 13 49 88 6b a2 17 |
e5 8c 1c c4 91 3b 38 63 4b e9 10 6e e3 ad 8e 6b 9d d9 81 4a |
06-22-2036 |
GTS Root R1.cer |
|
33 |
GTS Root R2 |
C = US, O = Google Trust Services LLC, CN = GTS Root R2 |
02 03 e5 ae c5 8d 04 25 1a ab 11 25 aa |
9a 44 49 76 32 db de fa d0 bc fb 5a 7b 17 bd 9e 56 09 24 94 |
06-22-2036 |
GTS Root R2.cer |
|
34 |
GTS Root R3 |
C = US, O = Google Trust Services LLC, CN = GTS Root R3 |
02 03 e5 b8 82 eb 20 f8 25 27 6d 3d 66 |
ed e5 71 80 2b c8 92 b9 5b 83 3c d2 32 68 3f 09 cd a0 1e 46 |
06-22-2036 |
GTS Root R3.cer |
|
35 |
GTS Root R4 |
C = US, O = Google Trust Services LLC, CN = GTS Root R4 |
02 03 e5 c0 68 ef 63 1a 9c 72 90 50 52 |
77 d3 03 67 b5 e0 0c 15 f6 0c 38 61 df 7c e1 3b 92 46 4d 47 |
06-22-2036 |
GTS Root R4.cer |
|
36 |
COMODO ECC Certification Authority |
CN = COMODO ECC Certification Authority, O = COMODO CA Limited, L = Salford, S = Greater Manchester, C = GB |
1f47afaa62007050544c019e9b63992a |
9f744e9f2b4dbaec0f312c50b6563b8e2d93c311 |
01-19-2038 |
COMODO ECC Certification Authority.cer |
|
37 |
ISRG Root X2 |
CN = ISRG Root X2, O = Internet Security Research Group, C = US |
41d29dd172eaeea780c12c6ce92f8752 |
bdb1b93cd5978d45c6261455f8db95c75ad153af |
09-17-2040 |
ISRG Root X2.cer |
|
38 |
certSIGN ROOT CA |
OU = certSIGN ROOT CA, O = certSIGN, C = RO |
200605167002 |
fab7ee36972662fb2db02af6bf03fde87c4b2f9b |
07-04-2031 |
certSIGN ROOT CA.cer |
|
39 |
DigiCert Assured ID Root G2 |
CN = DigiCert Assured ID Root G2, OU = www.digicert.com, O = DigiCert Inc, C = US |
0b 93 1c 3a d6 39 67 ea 67 23 bf c3 af 9a f4 4b |
a1 4b 48 d9 43 ee 0a 0e 40 90 4f 3c e0 a4 c0 91 93 51 5d 3f |
01-15-2038 |
DigiCert Assured ID Root G2.cer |
|
40 |
DigiCert Assured ID Root G3 |
CN = DigiCert Assured ID Root G3, OU = www.digicert.com, O = DigiCert Inc, C = US |
0b a1 5a fa 1d df a0 b5 49 44 af cd 24 a0 6c ec |
f5 17 a2 4f 9a 48 c6 c9 f8 a2 00 26 9f dc 0f 48 2c ab 30 89 |
01-15-2038 |
DigiCert Assured ID Root G3.cer |
|
41 |
DigiCert Global Root G3 |
CN = DigiCert Global Root G3, OU = www.digicert.com, O = DigiCert Inc, C = US |
05 55 56 bc f2 5e a4 35 35 c3 a4 0f d5 ab 45 72 |
7e 04 de 89 6a 3e 66 6d 00 e6 87 d3 3f fa d9 3b e8 3d 34 9e |
01-15-2038 |
DigiCert Global Root G3.cer |
See Also
3446646 - Renewal of SAP Passport CA certificate - SAP Business ByDesign
3336913 - Tenant Certificate Details in SAP Business ByDesign
3512176 - Domain Certificate Renewal *businessbydesign.cloud.sap and *sapbydesign.com
3679342 - You Receive a Notification Regarding Renewal of ByD Mandate User Certificate (M-User) From SAP
Keywords
client certificates, trusted certification authorities. , KBA , SRD-CC-SEC , Security , How To
SAP Knowledge Base Article - Public