Built in Cert no Renewing even after running the command

If you're still seeing the expired built-in certificate after running the execute vpn certificate local generate default-ssl-key-certs command, try removing the expired certificate manually from System -> Certificates and then regenerate the certificate. Afterward, reboot the FortiGate device to ensure the new certificate is applied. Check your SSL-VPN or other related configurations to make sure they are using the updated certificate. If the issue persists, review the FortiGate logs for errors during the certificate generation process, as it may provide additional insights.

Hello @heyyo ,

If executing the commands still didn't helped to renew the built-in certificates you can try to perform both two commands as below :

#exec vpn certificate local generate default-ssl-key-certs

#exec vpn certificate local generate default-ssl-serv-key

Try to access the fortigate GUI through another browser and check again the status. Usually, the built-in certificate cannot be deleted from the firewall.

Best regards,