Technical Tip: How to configure a local certificate within the FortiGate parameter with Subject Alternative Name

[onunez]

Description

A FortiGate can generate the type certificate signing request, however sometimes it may be required to use the parameter Subject Alternative Name.  If this is not correctly configured it can give error:

The imported local certificate is invalid.

Scope

Generate Certificate Signing Request with Subject Alternative Name.

Solution

To ensure that the error no longer appears above it is necessary to check the following:

Certificate Name :  Certificate VPN
Subject Information
ID Type: Domain Name
Domain Name: Fortinet.com

Optional Information
Organization Unit: Fortinet
Organization: Fortinet
Locality /City: Mexico
State/Province: Mexico
Country/Region: MEXICO(MX)
E-mail: certificate@fortinet.com
Subject Name: DNS:Fortinet.com          ----{ It is essential to manage this format).