Troubleshooting Tip: Error 'CRL/certificate file doesn't matched CA imported' when uploading remote certificate

[mle2802]

Description	This article describes how to troubleshoot the error 'CRL/certificate file doesn't matched CA imported' when uploading a remote certificate.
Scope	FortiGate.
Solution	When uploading a remote certificate, especially in the case of SAML authentication with Azure, the user may encounter the error 'CRL/certificate file doesn't have matched CA imported'. When trying to create the cert using CLI, error code 651 could be seen: The cause of this issue is that FIPS-CC is enabled on the device. To import the remote certificate when FIPS-CC is enabled, it will be necessary to have a valid certificate with Basic Constraints to the IdP Application.  Note: To create a certificate with Basic Constraints from Azure, refer to this document for more information: Technical Tip: Unable to import remote certificate to FIPS-CC enabled FortiGate for SAML authenticat...