Check Point Mobile VPN uses legacy CCC authentication, as a result only full DN certificates are allowed.
Clarification:
CCC (Client Control Channel) is a communication protocol between CP-RAS and its clients, designed as the channel for all control data, i.e., data that is not generated by the user.