3665747 - Importing Signed Certificate Fails with Error “Constructed encoding for BIT_STRING not supported!” in SAP Java System (SSO Certificate Renewal)

When attempting to import a newly signed certificate into the SAP Java system (e.g., Solution Manager, NetWeaver, or AS Java) during SSO certificate renewal, the following error occurs:

ERROR: java.security.cert.CertificateException: java.io.IOException: Constructed encoding for BIT_STRING not supported!

This occurs even though the CSR was generated successfully, the CA-signed certificate appears valid, and the same error occurs after creating a new entry and generating a new CSR.

SAP NetWeaver AS Java

Constructed encoding for BIT_STRING not supported,
CertificateException,
DER vs PEM,
Import Certificate Reply,
SSO Certificate Renewal,
SAP JVM ASN.1,
Solution Manager,
NetWeaver AS Java,
Keystore View,
CSR , KBA , BC-JAS-SEC-AUT , ACLs, J2EE Roles, UME Actions , Problem