FortiOS 7.6.8: Certificate-Based IPsec Authentication Using the Wrong Local ID Type Paid Members Public
After upgrading to FortiOS 7.6.8, one IPsec tunnel used ASN.1 DN instead of FQDN. The issue may affect setups with multiple certificate-based tunnels and was resolved by setting ike-localid-type to fqdn.
