Technical Tip: Signing a CSR with SAN Support Using FortiAuthenticator

To sign a CSR with SAN information intact, follow these steps:

• Go to Certificate Management -> End Entities -> Users -> Select the Import option.

• In the Import Signing Request or Certificate window:
  • Set Type to CSR to sign.
  • Upload the .csr file under the CSR file (.csr, .req).
  • Select the appropriate Certificate Authority (CA) for signing.
  • Set the Validity period as needed.
  • Choose a Hash algorithm.
  • Select Import to complete the process.

• Install the signed certificate on the original device that generated the CSR.

Note: Using the proper import and signing method in FortiAuthenticator allows maintenance of the SAN field.