Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
- Domain: fsslvpn.amfabinc.com
- ACME client: FortiGate 400F built-in (FortiOS 7.2.13)
- Problem: account paused, unpause URLs appear truncated by ACME client and show "Invalid unpause URL"
- can you please manually clear the account hold on it@amfabinc.com
If your client isn't giving you the full URL, there isn't a way to unpause that account. You need to either dig through its logs to find the URL if possible, or have the client make a new account.
Accounts aren't tied to email addresses, and in most cases there isn't really any advantage to keeping using the same account, so making a new one once you've fixed the problem that was causing the pausing shouldn't really be a problem.
This was brought up as a possible concern when the pause feature was implemented, but the engineers decided that the tradeoff of having longer URLs was worth it.
You may want to look at these threads about trying to get the unpause URL out of FortiGate, maybe one of them can help you: