Troubleshooting Tip: Error 'Unable to create a server certificate' while creating a certificate signing request (CSR) in FortiAuthenticator

[Nivedha]

Description	This article describes how to resolve the following error in FortiAuthenticator: Unable to create a server certificate: [('X509 V3 routines', 'v2i_GENERAL_NAME_ex', 'missing value'), ('X509 V3 routines', 'X509V3_EXT_nconf', 'error in extension')]
Scope	FortiAuthenticator.
Solution	While creating a CSR for a third party CA on FortiAuthenticator, the following error may occur: Unable to create a server certificate: [('X509 V3 routines', 'v2i_GENERAL_NAME_ex', 'missing value'), ('X509 V3 routines', 'X509V3_EXT_nconf', 'error in extension')] This generally happens when there are multiple DNS values added to subject alternative name (SAN) fields in the incorrect format. The correct format to add DNS into SAN fields is: domain1.com, DNS: domain2.com Ensure the correct format was used, making changes as necessary, then attempt to create the request again. If the issue persists, contact technical support.