Technical Tip: How to clear cache of server and client certificate in case web page is blocked with NET:: ERR_CERT_AUTHORITY_INVALID

[kbountouris]

Description	This article shows how to clear the cache of the server certificate and client certificate.
Scope	FortiGate.
Solution	Background: When the web page is blocked by the certificate untrusted error, the following solution can be used to clear the cache and make the certificates work properly again. The web pages will be accessible again and not blocked. The error that is visible while accessing the page is: NET:: ERR_CERT_AUTHORITY_INVALID Also, in the logs the following error is shown: block-cert-untrusted Solution: Open SSH to the FortiGate and execute: diag ips share list scert_cache <-- To view the server entries. diag ips share list ccert_cache <-- To view the client entries. diag ips share clear scert_cache <-- To clear the server entries. diag ips share clear ccert_cache <-- To clear the client entries. diag ips share clear cert_verify_cache diag test app ipsmonitor 99 exe update-now