Source: https://kb.fortinet.com/kb/viewAttachment.do?attachID=SSL%20VPN%20Certificate%20based%20Authentication.pdf