SAP Knowledge Base Article - Public

3775701 - What to know when installing an SSL from GoDaddy or Starfield for your RMK career site - Recruiting Marketing

Symptom

Customers who obtained an SSL certificate from the Certificate Authority GoDaddy or Starfield since June 15 2026 may have issues to install it in the CSB SSL Tool.

They are able to upload the files successfully but the SSL goes back to the uninstalled status.

Environment

SAP SuccessFactors Recruiting Marketing

Cause

Missing additional intermediate certificate causing a certificate chain incomplete error. 
This is caused by the Certificate authority transitioning to the R1 root hierarchy. The R1 root is still in the process of being broadly trusted/distributed in browser and OS trust stores. To ensure newly issued R1 certificates work immediately in browsers, they have created an additional intermediate cross certificate that cross-signs the new R1 cert with the already trusted G2 root.This file is included in the bundle but not uploading it results in the error.

Resolution

The SSL certificate needs additional certificates in the bundle so web browsers can trust your site. 

To prevent the issue from occurring:
When uploading the SSL in CSB, do make sure to upload all the intermediate certs in the certificate bundle provided by GoDaddy. The bundle contains the intermediate, cross, and trusted root certificates required for browsers and operating systems to build a trusted certificate chain. 
Since the CSB SSL tool does not allow more than one intermediate certificate to be uploaded, you will have to combine them as per KBA : 3111993 - How to Upload Two Intermediate Certificates in CSB - Recruiting Marketing

To correct the issue once the SSL is uploaded
Once the files are uploaded you cannot delete the entry and start again with the same cert as the database will retain the error code.
In this case you will have to create a case with Support so our Operations team can upload the missing intermediate cert on your behalf and complete the install.




See Also

3298546 - SSL installation in Uninstalled status in CSB SSL tool - Recruiting Marketing 

3111993 - How to Upload Two Intermediate Certificates in CSB - Recruiting Marketing

Go Daddy help articles on the topic:
Why is GoDaddy removing ClientAuth EKU and transitioning to the R1 root hierarchy for DV TLS issuance?
Fix an untrusted root or certificate chain error

Keywords

Uninstall, SSL, GoDaddy , KBA , LOD-SF-RMK-CER , Certificate Renewal, IP Address, Domain , How To

Product

SAP SuccessFactors Recruiting all versions