TLS Certificate fails in NS8

How does NS8 determine what its FQDN is, and how can it be changed? I don’t see that there’s a setting in the cluster-admin dashboard to do it.