VPN certificate error, set subject error

[Expa]

Hello!

Have not found anything similar by forum search..

I get an error while configuring peer for VPN ipsec using certificate:

config user peer
edit peer_name
set mandatory-ca-verify enable
set ca 'CA_num'
set subject 'C = something, ST = something, L = something, O = something, OU = something, CN = something'

On this step I get error "string value is too long. the size is 130, the limit is 127".

When i delete few symbols from set subject command works, but obviously VPN doesn't later on, as "Peer SA proposal not match local policy". Seems like this CA subject is too long for fortinet OS.

As for now I will ask another side to change CA subject, if it is possible.

Nonetheless, it would be great to have any tips with this. Cheers.