Common name in SAML x509 certificate

The x509 certificate for SAML on my realm has the common name “Xyz Staff”. A new application I’m trying to integrate insists that the common name should be a valid URL or URN. I can’t see anywhere to configure this. How can I fix it? It looks like it’s just coming from the realm name.

My realm is showing up as named “Xyzstaff” in the administrative console. I see that value as the realm.name in the database, but the realm_id is “Xyz Staff”, which is what’s in the CN. It doesn’t seem to be editable though.

Ah the problem was that Atlassian didn’t like the certificate without the begin/end certificate lines, as it is shown in the Keycloak console. The common name didn’t matter.