DescriptionA FortiGate can generate the type certificate signing request, however sometimes it may be required to use the parameter Subject Alternative Name. If this is not correctly configured it can give error:
The imported local certificate is invalid.
ScopeGenerate Certificate Signing Request with Subject Alternative Name.
SolutionTo ensure that the error no longer appears above it is necessary to check the following:
Certificate Name : Certificate VPN
Subject Information
ID Type: Domain Name
Domain Name: Fortinet.com
Optional Information
Organization Unit: Fortinet
Organization: Fortinet
Locality /City: Mexico
State/Province: Mexico
Country/Region: MEXICO(MX)
E-mail: certificate@fortinet.com
Subject Name: DNS:Fortinet.com ----{ It is essential to manage this format).