Yes. I just backed up the root ca (including the key). Note that this
was in pfx (.p12). Then I had to convert it to pem using openssl. After
converting you would get a key file and a pem certificate. Then on the
fortigate under certificates use the ...
