When the SSL proxy inspects the server certificate for Web Filtering only in SSL Handshake mode, which certificate field is being used to determine the site rating?

When a FortiGate performs SSL inspection in SSL Handshake mode for web filtering, it inspects the server's certificate during the TLS handshake. The Common Name (CN) field (or Subject Alternative Name - SAN) within the certificate is primarily used to identify the domain name of the website, which is then queried against the web filtering database to determine its category and rating.

The Organization field specifies the legal entity owning the certificate, not the domain name of the website for content rating.

The Organizational Unit field specifies a division within the organization, which is not used for website content categorization.

The Serial Number is a unique identifier for the certificate itself, not used to determine the website's content rating.

The Validity period indicates when the certificate is active, which is not used for determining the website's content rating.