HiI have created a rule which looks like: "CERTUSER <-- issuer-o="siemens".I can verify, that my certificate contains this "o" field. In matching policy I activitad "match group from rules". Even though the client can't connect to my vpn3k. In log I ...