3010115 - Failed to sign the Cloud Connector certificate for subaccount - Certificate doesn't match any of the subject alternative names

Symptom

Establishing a connection from SAP Cloud Connector to SAP Business Technology Platform (BTP) fails with the following message:

500 Failed to sign the Cloud Connector certificate for subaccount <subaccount>@<region>.hana.ondemand.com. Verify configuration and proxy settings. See ''Log And Trace Files'' and in particular ljs_trace.log for details. Consult SAP note 2460641 for possible remedies.

In the Cloud Connector logs (ljs_trace.log), the following error is found:

Preparation of tunnel certificate for <subaccount>@<region>.hana.ondemand.com account failed.
com.sap.scc.servlets.CriticalSccException: Preparation of tunnel certificate for <subaccount>@<region>.hana.ondemand.com account failed
...
Caused by: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <connectivitycertsigning.<region>.hana.ondemand.com> doesn't match any of the subject alternative names: [...host(s) different than 'connectivitycertsigning.<region>.hana.ondemand.com'...]

Environment

SAP Cloud Connector release independent.

Product

SAP Connectivity service all versions

Keywords

cloud connector, btp, connectivitycertsigning, failed to sign, certificate, doesn't match any of the, subject alternative name, DNS, name resolution, signing, hana.ondemand.com, SAP Cloud connector, connector, SCC, CC, subaccount, sub-account, sub account, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.