Technical Tip: Understanding Certificate Creation with Underscores and Hyphens in FortiAuthenticator

To create a certificate with a hyphen in FortiAuthenticator, follow these steps:

1. Go to -> Certificate Management -> Certificates.
2. Select Generate to create a new certificate.
3. In the Subject field, enter the desired certificate name with a hyphen.
4. Complete the remaining certificate settings as needed.
5. Select OK to save the certificate.

While RFC 1035 prohibits the use of underscores in domain names, FortiAuthenticator allows them in certificate names (CN) because the subject of a certificate is not necessarily a domain name (FQDN); it can be a hostname, serial number, etc.

Hence, FortiAuthenticator allows underscores in the certificate CN, which does not contradict RFC 1035.