Description
This article describes the steps to view the Default Trusted CA certificates, including those that are part of the 'Certificate Bundle' package that is updated via FortiGuard communications.
Solution
To view in the GUI, go to Security Profiles -> SSL/SSH inspection and select any SSL/SSH inspection profile from the list.
After, select 'View Trusted CA List'.
In the pane that appears on the right, the trusted CAs certificates are visible. This will include CA certificates that are inside the 'Certificate Bundle' (CRDB) package that is automatically updated via FortiGuard.
To view them in the CLI, the following command can be used to list the trusted CA certificates:
execute vpn certificate ca export tftp ?
<string> local certificate name
ACCVRAIZ1
AC_RAIZ_FNMT-RCM
AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS
ANF_Secure_Server_Root_CA
Actalis_Authentication_Root_CA
AffirmTrust_Commercial
<.....>
