3669993 - Certificate for <> doesn't match any of the subject alternative names raised from SAP Cloud Connector(SCC)

While setting up a new SCC HTTPS mapping for an SAP ABAP/S4HANA backend system, from SCC UI it fails with "Not reachable", and following is perceived from SCC trace (ljs_trace.log / scc_core.trc).

====
20xx-xx-xx xx:xx:xx,xxx -0300#INFO#com.sap.scc.rt#AccessControl connection checker#          #SccEndpointValidator failed to establish connection to HTTPS://<backend-host>:<backend-port>
javax.net.ssl.SSLPeerUnverifiedException: Certificate for <backend-host> doesn't match any of the subject alternative names: []
    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname(SSLConnectionSocketFactory.java:507)
    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:437)
    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
====

• SAP Cloud Connector(SCC) release independent;
• SAP AS ABAP/S4HANA system.

SAP cloud connector, CC, connection, cloud connector, HTTPS, trust, certificate, cert, subject, subject DN, subject CN, SAN, subject alternaive names, backend, back end, back-end, ABAP, S4hana, STRUST, trust store, mapping, internal host, AccessControl connection checker, SccEndpointValidator , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem