Fortigate Unpause URL is invalid, can't find full URL

My domain is: hafoundation.org

I ran this command: Fortigate auto-renewal.

It produced this output:
Error (Your account is temporarily prevented from requesting certificates for secure.hafoundation.org and possibly others. Please visit: Let's Encrypt - Portal on Mon Feb 23 15:00:21 2026 (UTC)

When I try to visit that URL, it says it's invalid. Other support posts say the URL should be 'very long', but this one is not.

My web server is (include version): FortiGate, current firmware in the 7.2 line.

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: AT&T fiber

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): I'm using Fortigate's software

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): Fortigate 7.2.13

Welcome @SeerSnively

Yes, that URL should be much longer. You should see 3 sequences separated by a period (xxx.xxx.xxx). I am not a Fortigate expert but is there a more detailed log that would show the full length of the error you were sent?

I see current certs for your apex domain and some subdomains (www, gateway, remote, ...). But, I didn't see any certs issued for secure.hafoundation.org in the past 6 months. Are you trying to resume using that domain name? If you don't need that name just changing your Fortigate to stop requesting a cert for that name would eliminate the error for it. You might see the message repeat for other "dormant" (zombie) domains. Repeat this for any others that show.

4 Likes

That seems a bit outdated.

3 Likes

That's the most recent version of the 7.2 line. It was just released a few weeks ago to deal with the FortiCloud SSO problem.

Do you know how to view detailed logs on a FortiGate? The URL keeps getting cut in the 'comment' section of the Certificate comments, but I can't seem to find the log file that generates those.

Have you tried asking Fortigate about the truncation?

Are you trying to issue a fresh cert for the secure subdomain? Or, are you just bothered by the "account paused" error message?

In the last 2 years I only see 2 certs issued for that subdomain and those were last June and July. The most recently issued one expired 4 months ago. It doesn't seem like a domain name that is essential. Would using a different domain name work-around this problem until you can get help from Fortigate?

This rate limit is described here: Rate Limits - Let's Encrypt This rate limit is only imposed after a large number of consecutive failures for that specific domain name.

2 Likes