The lack of clarity in FortiGate's error messages and documentation continues to irk me. The syntax required for it to include multiple DNS names in the certificate request from the GUI is: DNS:dnsname.com,DNS:seconddnsname.com . DNS: must be capitalized, and there cannot be spaces between the comma and the next entry.