# Error while trying to renew my cert on FortiGate

**URL:** <https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979>\
**Category:** Help\
**Created:** [December 12, 2023, 3:56pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979 "2023-12-12T15:56:19Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jideojabs](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@Jideojabs](https://community.letsencrypt.org/u/Jideojabs)\
**Post date:** [December 12, 2023, 3:56pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/1 "2023-12-12T15:56:19Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [union-data.offthegriid.com](http://union-data.offthegriid.com)

I ran this command: diagnose sys acme status-full

It produced this output:

```nohighlight
Union-Data-01 (global) # diagnose sys acme status-full union-data.offthegriid.com
{
  "name": "union-data.offthegriid.com",
  "finished": false,
  "notified": false,
  "next-run": "Tue, 12 Dec 2023 15:57:49 GMT",
  "last-run": "Tue, 12 Dec 2023 14:57:48 GMT",
  "errors": 398,
  "last": {
    "status": 22,
    "status-description": "Invalid argument",
    "problem": "urn:ietf:params:acme:error:malformed",
    "detail": "No order for ID 226165665486"
  },
  "log": {
    "entries": [
      {
        "when": "Tue, 12 Dec 2023 14:57:49 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:49 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:49 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:49 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 14:57:48 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:47 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:47 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:47 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 13:57:46 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:46 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:46 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:46 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 12:57:45 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:45 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:45 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:45 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 11:57:44 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:04 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:04 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:04 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:04 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 11:15:03 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:43 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:43 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:43 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:53:42 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:02 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:02 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:02 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:43:01 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:41 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:41 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:41 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:37:40 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:35:00 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:35:00 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:35:00 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:59 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:59 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:59 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:58 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:58 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:58 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:34:58 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:38 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:37 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:37 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:37 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:33:37 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:57 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:57 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:57 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:57 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:56 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:36 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:36 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:36 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:36 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "progress",
        "detail": "Checking staging area"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:35 GMT",
        "type": "starting"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:25 GMT",
        "type": "message-errored"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:25 GMT",
        "type": "renewal-error",
        "status": "urn:ietf:params:acme:error:malformed",
        "detail": "No order for ID 226165665486"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:25 GMT",
        "type": "progress",
        "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:25 GMT",
        "type": "progress",
        "detail": "Loaded order from staging"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:24 GMT",
        "type": "progress",
        "detail": "Selecting account to use for union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:24 GMT",
        "type": "progress",
        "detail": "Driving ACME protocol for renewal of union-data.offthegriid.com"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:24 GMT",
        "type": "progress",
        "detail": "Contacting ACME server for union-data.offthegriid.com at https://acme-v02.api.letsencrypt.org/directory"
      },
      {
        "when": "Tue, 12 Dec 2023 10:32:24 GMT",
        "type": "progress",
        "detail": "Assessing current status"
      }
    ]
  }
}

```

My web server is (include version): FortiGate 601e

The operating system my web server runs on is (include version): v7.0.13

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 4:08pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/2 "2023-12-12T16:08:06Z")

</div>

Hi @Jideojabs, and welcome to the LE community forum 🙂

> [@Jideojabs](#):
>
> v7.0.13

hmm...  
Can you go to 7.2 or 7.4 ?

Do you have multiple ISPs?

---

<div class="post-metadata">

**Author:** ![scsiraidguru](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@scsiraidguru](https://community.letsencrypt.org/u/scsiraidguru)\
**Post date:** [December 12, 2023, 4:12pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/3 "2023-12-12T16:12:16Z")

</div>

Did you create the certificate on the Fortinet or import it? 7.2 and 7.4 won't help. I use 7.2.6 on my Fortinet 60E and they took away options.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 4:45pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/4 "2023-12-12T16:45:08Z")

</div>

All my gates create their own certs.  
All the webservers create their own certs.

---

<div class="post-metadata">

**Author:** ![scsiraidguru](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@scsiraidguru](https://community.letsencrypt.org/u/scsiraidguru)\
**Post date:** [December 12, 2023, 4:48pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/5 "2023-12-12T16:48:41Z")

</div>

Is the Fortigate cert configured for automatic renewal or did you do it manual install.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 4:58pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/7 "2023-12-12T16:58:27Z")

</div>

They renew automatically.

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/8/e/8e1cbb4e18b7654bca86cff6bc9b0afb6607cfa5.png)

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/4/9/49a18ec006a5192ad2416d98c0a5c1549c29eebb.png)

---

<div class="post-metadata">

**Author:** ![scsiraidguru](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@scsiraidguru](https://community.letsencrypt.org/u/scsiraidguru)\
**Post date:** [December 12, 2023, 4:59pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/8 "2023-12-12T16:59:09Z")

</div>

[https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support](https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support)

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 5:02pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/9 "2023-12-12T17:02:39Z")

</div>

Step #8 requires you to set the ACME interface(s).  
 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/1/d/1d149258e95a86b228bd9c8a49ca9ec5de6e854d.png)

Have you done that?

---

<div class="post-metadata">

**Author:** ![scsiraidguru](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@scsiraidguru](https://community.letsencrypt.org/u/scsiraidguru)\
**Post date:** [December 12, 2023, 5:04pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/10 "2023-12-12T17:04:48Z")

</div>

Acme Interfaces are WAN1 and WAN2 because I have two ISPs and SD-WAN.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 5:08pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/12 "2023-12-12T17:08:57Z")

</div>

I've seen issues previously when multiple interfaces where added.  
Again, I don't recall the specific ForitOS version - but TAC should be able to confirm that you are beyond that version number.

And `SD-WAN` can also create issues with ACME.  
Issues they have overcome in recent releases.  
Again, speak with Fortinet support to ensure you are not affected.

---

<div class="post-metadata">

**Author:** ![Jideojabs](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@Jideojabs](https://community.letsencrypt.org/u/Jideojabs)\
**Post date:** [December 12, 2023, 5:50pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/13 "2023-12-12T17:50:57Z")

</div>

Yes we do, and we have other sites running on the same OS with no issue.

---

<div class="post-metadata">

**Author:** ![Jideojabs](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@Jideojabs](https://community.letsencrypt.org/u/Jideojabs)\
**Post date:** [December 12, 2023, 5:51pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/14 "2023-12-12T17:51:51Z")

</div>

Yes it is set on my outgoing interface.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 8:30pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/15 "2023-12-12T20:30:56Z")

</div>

> [@Jideojabs](#):
>
> it is set on my outgoing interface.

You have two to choose from...  
It should be set to the interface with the IP that is resolved from the FQDN that's trying to get a cert.

---

<div class="post-metadata">

**Author:** ![Jideojabs](https://avatars.discourse-cdn.com/v4/letter/j/d07c76/32.png) [@Jideojabs](https://community.letsencrypt.org/u/Jideojabs)\
**Post date:** [December 12, 2023, 9:05pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/16 "2023-12-12T21:05:33Z")

</div>

Yes it is set to that, I resolved the issue by deleting it and creating a new one. Looks like LE didnt have an entry for my domain.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [December 12, 2023, 9:13pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/17 "2023-12-12T21:13:56Z")

</div>

> [@Jideojabs](#):
>
> I resolved the issue by deleting it and creating a new one.

Please explain that in more detail.

> [@Jideojabs](#):
>
> Looks like LE didnt have an entry for my domain.

What do you mean by that?

---

<div class="post-metadata">

**Author:** ![mcpherrinm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mcpherrinm/32/59604_2.png) [@mcpherrinm](https://community.letsencrypt.org/u/mcpherrinm)\
**Post date:** [December 12, 2023, 9:17pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/18 "2023-12-12T21:17:24Z")

</div>

> "detail": "No order for ID 226165665486, problem: urn:ietf:params:acme:error:malformed"

This potentially looks like an instance of "the 404 bug", where boulder sometimes returns a 404 if it queries a replica that is a bit behind. This is a long-standing issue with Let's Encrypt and can cause spurious errors. Retrying usually fixes it, as it happens randomly depending on what database replica gets used.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [January 11, 2024, 9:18pm UTC](https://community.letsencrypt.org/t/error-while-trying-to-renew-my-cert-on-fortigate/209979/19 "2024-01-11T21:18:23Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.