This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 42%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVD%3C/text%3E%3C/svg%3E)
Hi,
In one of our SAP systems we have the *.azure-api.net certificate which will expire on the 23rd of January 2024. I'm looking for a place where I can download a newer version of this particular certificate. Does anybody know where or how I can obtain a newer version of this certificate?
Kind regards,
Dennis
Hi Dennis,
You can browse to [ https://test.azure-api.net ] using Chrome and once there, click the icon next to the url -- Connection is secure -- Certificate is valid -- Details tab -- Export button.
Please click Accept Answer and upvote if the above was helpful.
Thanks.
-TP
Thank you so much for thinking along with me. When I open the link you've send and do the steps you've mentioned I get the test.azure-api.net certificate instead of the *.azure-api.net:
Below is certificate. Copy/paste into Notepad and save as .crt file extension:
-----BEGIN CERTIFICATE-----
MIIJCTCCBvGgAwIBAgITMwDSvQ0wk0fIH/VY6AAAANK9DTANBgkqhkiG9w0BAQwF
ADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u
MSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDEwHhcN
MjMxMDExMDkzNzAzWhcNMjQwNjI3MjM1OTU5WjBmMQswCQYDVQQGEwJVUzELMAkG
A1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD
b3Jwb3JhdGlvbjEYMBYGA1UEAwwPKi5henVyZS1hcGkubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztic6rKZasNwGnCfKHGFrdqh/aezO9qjVsac
4C20mTyO2OHrRPv485Mhf4hy1/sdoUPUL2HkUgkPy7vbtKk6AKYRfvpC7fmx7Jkc
F/OYbvQX/og6p1DJKT9pl7E5kOdfS5XBn2i3lXjUSYhwl+NX/qXMp+blTxjVL6AZ
vQnws9O/DedWBOFhksTVHgxdo2TE59suIb7qzekKnhLZ0FjnOk9KlIcwVGulNwUx
YGkUh/Oc5V569SusZAc1Jc3LwI4gROhYciQpVNOuJLY1K7ngtjlQd2nZts5LblIq
n0AlXKHIj+KDl6lzYbIaSRwDEtzzCaHNDD4FP8/nqKcQY7tj1QIDAQABo4IEuzCC
BLcwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTNE6Iy
h0Z8vOzew1FIWUZxH7WbAAABix4h/p0AAAQDAEcwRQIhAP0mpYhgwoo03afKjNTs
N+p0KAGJ8885sT2qDMWOgIzaAiAuhJIsKGe9oqJwgzKjXMucOWkN/0fD3Fgc5oV5
Iyg7jQB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABix4h/scA
AAQDAEgwRgIhAKGZDACY7kv92m1TylBG54/TSDIF1n9P30NNoayHcXUkAiEAtCjb
TG895N9pHG2ug3KqcUbYZXGMUVJAKk1Qm1IxaAwAdQBIsONr2qZHNA/lagL6nTDr
HFIBy1bdLIHZu7+rOdiEcwAAAYseIf6sAAAEAwBGMEQCIF1t6bc9mAMR+pI/E5kQ
1+V1B0E3tPJ7veH6nxFnfTA6AiBn1twNCJR8D9eZz/gcsSxSQpONBEriWIwRiXJN
R6K5ZTAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMDwG
CSsGAQQBgjcVBwQvMC0GJSsGAQQBgjcVCIe91xuB5+tGgoGdLo7QDIfw2h1dgoTl
aYLzpz4CAWQCASYwga4GCCsGAQUFBwEBBIGhMIGeMG0GCCsGAQUFBzAChmFodHRw
Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMEF6
dXJlJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDElMjAtJTIweHNpZ24uY3J0MC0G
CCsGAQUFBzABhiFodHRwOi8vb25lb2NzcC5taWNyb3NvZnQuY29tL29jc3AwHQYD
VR0OBBYEFG0QmStr87e4mciVQDdDLB8zL11cMA4GA1UdDwEB/wQEAwIFoDCBzwYD
VR0RBIHHMIHEgg8qLmF6dXJlLWFwaS5uZXSCFioucG9ydGFsLmF6dXJlLWFwaS5u
ZXSCGioubWFuYWdlbWVudC5henVyZS1hcGkubmV0ghMqLnNjbS5henVyZS1hcGku
bmV0gh0qLmNvbmZpZ3VyYXRpb24uYXp1cmUtYXBpLm5ldIIYKi5yZWdpb25hbC5h
enVyZS1hcGkubmV0ghkqLmRldmVsb3Blci5henVyZS1hcGkubmV0ghQqLmRhdGEu
YXp1cmUtYXBpLm5ldDAMBgNVHRMBAf8EAjAAMGQGA1UdHwRdMFswWaBXoFWGU2h0
dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMEF6
dXJlJTIwVExTJTIwSXNzdWluZyUyMENBJTIwMDEuY3JsMGYGA1UdIARfMF0wUQYM
KwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0
LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTAIBgZngQwBAgIwHwYDVR0j
BBgwFoAUDyBd16FXlduSzyvQx8J3BM5ygHYwHQYDVR0lBBYwFAYIKwYBBQUHAwIG
CCsGAQUFBwMBMA0GCSqGSIb3DQEBDAUAA4ICAQCg1JPlfNMXovJjve6YbtY08Amq
wHnyUM3ufODcqyl+zyelSImcC/b/KdLSjRSXnHvqSB/vNqV0GLClBciSkgvYmrUc
x8b582VKA+8VlD59jMOE8d2QBxQT4n8cLgCix5clgs2dBJOA37SevnipOOsTy4Bj
bb/ohQvIxkKv8G1Gbj/BDn05G5YeYWs8MvNk2RTxTzn14BTzotqYOPU5PWUQdKYi
dsBpyvcJmGM54SVMQVhmJjHBH0D6MWH9NkTuA3nWvN05DAfX2w22Cri34WN5JiHT
vzQqaAPq/cE0+eVrxAAIsAfztZ6wMBtPcviF0xl9S9KlhbN/4EXhgTHetsFL3QbX
XD8Mgg9UM+z866Bz1vWl91INf1Ep/yiqg/gcYHgOWnwR5D+3sSVvD1eZs/fGOQMJ
MRhCoTjLosLucrabQgQu5ggG805nvk9MWBgW3uMY/joUFUde/MYHnqthNUzmo8z1
8MYtztB4PWhSYfAnnVvckv3k/RmKeBtWvVLG804nMNF/BVBWIpc7sGrxlVLjzbNC
cGrAqZP+6w7FzkRU122HRCLawS+68MDIRQYw1bLLH2ftjoeqJfsaOVNDacJUKOew
yr4tsXzG1oTczQsfOtG8Iq2t8N5wxQUS0XycQpW4t7CALhxY+Dn4IENq3PasKhGX
xR8lo3tHcs4bAxtoSQ==
-----END CERTIFICATE-----
With this I was able to get a newer certificate, thanks TP. I would still like to know where I could download the certificate otherwise I need to reach out to you :-)
With this I was able to get a newer certificate, thanks TP. I would still like to know where I could download the certificate otherwise I need to reach out to you :-)
Hi Dennis, looking at your certificate above, it appears your machine is behind a firewall or other security device/software that is doing TLS inspection and thus issuing its own certificates on the fly. In this type of configuration all of your web traffic is routed through the device and it acts as a "middleman", inspecting all of the traffic for security/compliance reasons.
In order for it to work this middleman device/software terminates the secure traffic, issues a "fake" certificate, re-encrypts it using this new cert, then sends traffic to your machine. This is why you are not seeing the correct certificate.
For this one use case you need to bypass the security device/software. You could do this by contacting your organization's security team and/or downloading the certificate using a machine that is outside of their control/management (check org policies before doing this).
If you compare the certificate I posted above to the one you downloaded via your browser you can see yours is issued by different authority.
Hi TP,
It indeed looks that way. When I connect to test.azure-api.net on my phone I do see the correct certificate. Thanks for the help. I now know what to do.
Regards,
Dennis
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 59%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
@van der Spek, Dennis Thanks for reaching out. The *.azure-api.net certificate is a wildcard certificate used by Azure API Management to secure APIs hosted on the Azure platform. The certificate is automatically renewed by Azure API Management before it expires.
If you are using the certificate for other purposes, such as to secure connections between your SAP system and Azure API Management, you may need to update the certificate manually. In this case, you can download the updated certificate from the Azure portal by navigating to the API Management service's custom domain blade and downloading the certificate for the *.azure-api.net domain.
please refer: https://learn.microsoft.com/en-us/azure/api-management/configure-custom-domain?tabs=managed
Do let me know if you have any queries.
Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.
Every single time I refer to the site mentioned I don't get the wildcard certificate but a specified certificate for that api:
van der Spek, Dennis Thanks for getting back, I believe you are doing in restricted environment, where cert store is not installing all managed certs.
Could you please try from another machine outside this network?
Hi JananiRamesh,
It indeed looks that way. When I connect to test.azure-api.net on my phone I do see the correct certificate. Thanks for the help. I now know what to do.
Regards,
Dennis
van der Spek, Dennis Glad to know that it helped. Feel free to get back to us in Microsoft Q&A if you need any assistance in future.