3485823 - Operation fails with 'The verified certificate chain is complete but no certificate is trusted' or 'Untrusted - Complete Chain'

• DigiCert Global Root G2 or G5 is already added
• You are facing below errors:
   
  

  • The verified certificate chain is complete but no certificate is trusted

  • Trusted: ERROR: Untrusted - Complete Chain
    

• Following errors might be also encountered:
  
  

• • Validation of dependents - Issuer Certificate (Issuer - Only Invalid Certificates Found)

  • PKI vailidation: FAILED

  • SSL API error

  • Failed to verify peer certificate. Peer not trusted.

  • SSO certificate validation failed: SSL error [<number>]: Unknown error, general error

In below example #01 (hanacloud.ondemand.com) is issued by #02 (DigiCert SHA2 Secure Server CA) and that is issued by #03  (DigiCert Global Root CA).

From the error it is visible that the chain of certificates is complete but #03 is untrusted.

----- BEGIN VERIFICATION RESULT -----

----- Messages -----------
ERROR: The verified certificate chain is complete but no certificate is trusted.
----- Summary -----------

#01 Certificate (End Entity): VALID
Subject: CN=hanacloud.ondemand.com, O=SAP SE, L=Walldorf, SP=Baden-Württemberg, C=DE
Issuer: CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
PKI validation: FAILED: Validation of dependents - Issuer Certificate (Issuer - Only Invalid Certificates Found)

#02 Certificate (Issuer): VALID
Subject: CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US
Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
PKI validation: FAILED: Validation of dependents - Issuer Certificate (Issuer - Only Invalid Certificates Found)

#03 Certificate (Issuer): VALID
Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Issuer: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
PKI validation: FAILED
Trusted: ERROR: Untrusted - Complete Chain

----- END VERIFICATION RESULT -----

• SAP HANA Cloud

SSO certificate validation failed, SSL error, Unknown error, general error, SSL API error, Failed to verify peer certificate, Peer not trusted, trusted, untrusted, chain, complete, incomplete, failed, PKI, validation, validation, dependents, peer, import export, remote source , KBA , HAN-CLS-HC , HANA Cloud Services HANA Cloud , HAN-DB-SDA , SAP HANA Smart Data Access , HAN-DP-SDI , SAP HANA smart data integration (SDI) , Known Error