Insert "different" SSL certificate into header

You can try using log statements in the rule to see where the failure is occurring. You could also capture a tcpdump and then use ssldump to decrypt the trace. This assumes that you're using a cipher that ssldump can decrypt.

 

 

Aaron