FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
This article describes the behavior of FortiAuthenticator when creating certificates with underscores and hyphens.
It explains why FortiAuthenticator allows underscores in certificate names despite RFC 1035 prohibiting them, and how to create certificates with hyphens.
Scope
FortiAuthenticator
Solution
To create a certificate with a hyphen in FortiAuthenticator, follow these steps:
Go to-> Certificate Management -> Certificates.
SelectGenerateto create a new certificate.
In theSubjectfield, enter the desired certificate name with a hyphen.
Complete the remaining certificate settings as needed.
SelectOKto save the certificate.
While RFC 1035 prohibits the use of underscores in domain names, FortiAuthenticator allows them in certificate names (CN) because the subject of a certificate is not necessarily a domain name (FQDN); it can be a hostname, serial number, etc.
Hence, FortiAuthenticator allows underscores in the certificate CN, which does not contradict RFC 1035.
