# How to recreate a certificate on Fortigate FOS 7.0.1 **URL:** \ **Category:** Help\ **Created:** [October 4, 2021, 6:12pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009 "2021-10-04T18:12:34Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![NicoB](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@NicoB](https://community.letsencrypt.org/u/NicoB)\ **Post date:** [October 4, 2021, 6:12pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/1 "2021-10-04T18:12:34Z")
Hello, I well configured the certificate on my appliance Fortigate 100F, by following the procedure on the Fortinet official website. Everything was good ! Then, for "teaching" my coworkers, I deleted all "Let's Encrypt" generated certificates on the appliance. And try do the procedure again. It is not working anymore. I have an error every time I'm trying. The message : "_Error (Unsuccessful in contacting ACME server at [https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory)_" But I can ping it ... How can i do for it work again please ? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 4, 2021, 7:06pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/2 "2021-10-04T19:06:39Z")
Hi @NicoB welcome to the LE community forum 🙂 Were there are rules using the cert you deleted? Was anything using it? ---
**Author:** ![NicoB](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@NicoB](https://community.letsencrypt.org/u/NicoB)\ **Post date:** [October 4, 2021, 8:13pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/3 "2021-10-04T20:13:46Z")
Hello, Nothing. I was going to apply it on my SSL portal in 2 week. It was in stand by. ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [October 4, 2021, 10:28pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/4 "2021-10-04T22:28:29Z")
Hi @NicoB, It's very possible that you're encountering a client software problem now that the old root certificate has expired (at the end of September 2021). If so, the software on your Fortigate appliance itself may need to be updated so that it accepts the new certificate. A less likely problem for this API is [https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/](https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/) (since the Let's Encrypt API is serving the short chain rather than the long chain), while a more likely problem is having an outdated root certificate store that doesn't including ISRG's X1 root certificate. I don't know how much visibility or control Fortigate gives you on software updates, but you might want to look into that and ask them if there are software updates available that could bear on compatibility with ISRG's root. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 3:18am UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/5 "2021-10-05T03:18:48Z")
Have a look at: [https://kb.fortinet.com/kb/documentLink.do?externalID=FD49028](https://kb.fortinet.com/kb/documentLink.do?externalID=FD49028) ---
**Author:** ![NicoB](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@NicoB](https://community.letsencrypt.org/u/NicoB)\ **Post date:** [October 5, 2021, 1:29pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/6 "2021-10-05T13:29:47Z")
Hello, Thx for the link, but I'm not sure this will help me here. As I said before, I didn't use it (certificate) anywhere. It was just created and I whish to implement on th 16 October. So it was just in "stand by". But now, I deleted it to do the procedure again to show and teach it to my student coworker. Unfortunately, I'm doing the exact same procedure and it is not working anymore. So my question is, is Let's Encrypt has a cache on their side (with domain name or mail address, or something else) which identifying/recognize my appliance and it don't want it anymore ? Do I have to wait some time for the cache to be flush on the Let's Encrypt side ? Thx for help, ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 5, 2021, 2:22pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/7 "2021-10-05T14:22:38Z")
> [@NicoB](#): > > So my question is, is Let's Encrypt has a cache on their side (with domain name or mail address, or something else) which identifying/recognize my appliance and it don't want it anymore ? Do I have to wait some time for the cache to be flush on the Let's Encrypt side ? No and no. ---
**Author:** ![beltskyy](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@beltskyy](https://community.letsencrypt.org/u/beltskyy)\ **Post date:** [October 11, 2021, 4:49pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/8 "2021-10-11T16:49:20Z")
I have just faced with the same problem. I was doing last night some training, then after successful getting the certificate, I deleted it and since that time I can't get new certificate. The log of Fortigate is showing the same message. Have you resolved the problem? ---
**Author:** ![NicoB](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@NicoB](https://community.letsencrypt.org/u/NicoB)\ **Post date:** [October 12, 2021, 6:02am UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/9 "2021-10-12T06:02:46Z")
Hello, I opened a ticket @Fortinet. They gave me 2 links : > **[Fortinet and Expiring Let’s Encrypt Certificates](https://www.fortinet.com/blog/psirt-blogs/fortinet-and-expiring-lets-encrypt-certificates)** > > Read more for an update from Fortinet about Let’s Encrypt certificates as well as how Fortinet is working to improve certificate validation.… and [https://kb.fortinet.com/kb/documentLink.do?externalID=FD53305](https://kb.fortinet.com/kb/documentLink.do?externalID=FD53305) Not far away from rg305 link. You can try it from your side. It didn't work for me. Except that I do not try to put all my rules to "flow-based" for 2 reasons : - I have more than 1000 rules ... - I did not use the certificate anywhere ... My Fortinet ticket has been escalated. I'm waiting for them now. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 12, 2021, 6:13am UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/10 "2021-10-12T06:13:56Z")
You could try to make one rule above all others with only one specific source and only one specific destination. Then "play" with that one rule until they can connect. ---
**Author:** ![orangepizza](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/orangepizza/32/19597_2.png) [@orangepizza](https://community.letsencrypt.org/u/orangepizza)\ **Post date:** [October 12, 2021, 6:56am UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/11 "2021-10-12T06:56:20Z")
there was another trick found buy people one reddit, remove dst root from store and dns blackhole [apps.identrust.com](http://apps.identrust.com) to stop Fortrinet from get issuer from isrg-signed by dst certificate that long chain has. (then clear cache and restart) [https://www.reddit.com/r/fortinet/comments/q1ug0n/lets\_encrypt\_fiasco/](https://www.reddit.com/r/fortinet/comments/q1ug0n/lets_encrypt_fiasco/) ---
**Author:** ![beltskyy](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@beltskyy](https://community.letsencrypt.org/u/beltskyy)\ **Post date:** [October 13, 2021, 6:25am UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/12 "2021-10-13T06:25:12Z")
could you please keep us informed about Fortinet ticket reply? thanks a lot! ---
**Author:** ![NicoB](https://avatars.discourse-cdn.com/v4/letter/n/ecccb3/32.png) [@NicoB](https://community.letsencrypt.org/u/NicoB)\ **Post date:** [October 27, 2021, 12:25pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/13 "2021-10-27T12:25:46Z")
The official answer received 2 days ago is : This will be fixed in 7.0.3 update. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 26, 2021, 12:26pm UTC](https://community.letsencrypt.org/t/how-to-recreate-a-certificate-on-fortigate-fos-7-0-1/162009/14 "2021-11-26T12:26:11Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.