SAP Knowledge Base Article - Preview

3255183 - Incomplete certificate chain for custom domain


  • After upload certificate for customer domain in Identity Authentication, you got SSL error in client application during SSLHandshake which is caused by incomplete certificate chain.
  • If you perform SSL Server Test via, you got result "This server's certificate chain is incomplete. Grade capped to B. ". Opening the section "Certification Paths" shows one of the certificate as "Extra Download".
  • Other similar websites like and  will complain issues with certificate chain when a test is performed with the custom domain IAS tenant.



Identity Authentication


Identity Authentication 1.0


IAS "Customer domain" "SSL Certificate" "Incomplete certificate chain",ssllabs,Extra download , KBA , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.