Create SAN certificate with Let's Encrypt on FortiGate

Hello @padi 

Per admin guide below "

• The Subject Alternative Name (SAN) field is automatically filled with the FortiGate DNS hostname. It cannot be edited, wildcards cannot be used, and multiple SANs cannot be added.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support?

regards,

Sheikh

Hi padi,

You can refer to the document below for more information:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/718606/provision-a-trusted-certificate-with-lets-encrypt
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-Let-s-Encrypt-traffic-through-the/ta-p/334464

Regards!

Thanks for the fast reply.
I already was able to provision my certificates from Let's Encrpyt. But the origin problem is, that we have two WAN connections from different providers, so two diffrent public IPs. Both are listen for SSL-VPN. But in the settings, I only can select one certificate. So I thought I could provision a Let's Encrypt Certificate with name vpn1.example.com and as SAN name vpn2.example.com.