4 to 20 alphanumeric characters including -_. allowed