Interpreting java ssl/hardshake debug in wrapper.log to resolve MID Server Certificate Check failuresSummary<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Table of Contents IntroductionThe -Djavax.net.debug=ssl:handshake Java propertyBroken Example for MID Server to Amazon AWS APIs, where zScaler intercepts the request Explanationagent.logwrapper.log Working Example for MID Server to Instance connection, where the expected Digicert Instance certificate is seen Explanationagent.logwrapper.log Introduction This KB article aims to explain java ssl/hadshake logging to help with the more difficult MID Server Certificate check policy debugging, where the MID Server either can't connect to the instance, or an integration endpoint. For each example, the explanation is given first, and then the bits of the debug where that conclusion came from are highlighted in the agent and wrapper log. The -Djavax.net.debug=ssl:handshake Java property Given that Java is a 'virtual machine', Java includes debug options which are in-effect a packet sniffer, so you don't need something like wireshark installed. This KB article assumes you have already enabled that, reproduced the issue, and have captured the agent and wrapper logs. The common ways to enable this are: KB0717261 How to enable SSL debug on the mid server to troubleshoot any issues with SSL connections?KB2912450 Temporarily adding MID Server java wrapper properties for debugging, using via MID Profiles in the Instance The benefits of this debug are: See exactly what certificates the MID Server sees on the endpoint, which may not be the same as you would see in a browser for the same URL.Confirm if there is even a certificate chain in the first place, or is the certificate self-signed.Confirm the URL is in the subject CN or SAN extension, for the Hostname checkConfirm which Root CA certificate would be needed in the Truststore (cacerts), which may be the correct solution for customer's servers signed by an internal CA.Confirm if an OCSP responder URL is in the certificate, for the Revokation checkGet clues to confirm that an inspection/interception firewall/proxy/gateway is involved, that the customer would need to set a bypass up in to prevent it interferring with ServiceNow's features. Broken Example for MID Server to Amazon AWS APIs, where zScaler intercepts the request Explanation This was a Cloud Discovery example, where probes could not conenct to Amazon's APIs. As part of debugging, the endpoint's FQDN had already been added to a Override MID Security policy to prevent the checks running. However the key point of this example is that it never was Amazon we were communicating with. It was zScaler doing what was in effect a man-in-the-middle attack, and looked exactly like that to the MID Sever, and these checks are there to prevent that sort of thing. No status code was returned because no request got made. It was blocked by the certificate checks before that could happen. The certificate chain is: sts.amazonaws.comZscaler Intermediate Root CA (zscaler.net) (t)Zscaler Intermediate Root CA (zscaler.net)Zscaler Root CA None of the zScaler certificates we see for the endpoint have OCSP responder URLs. That will mean the revocation check fails. CRL urls are in the certificates, but MID Server only supports OCSP at the moment - There is an enhancement request you could upvote:Idea Portal: MID Certificate policies to support CRL as an alternative to OCSP 1 is the problemproblem, because it is basically a lie. The FQDN of this request is organizations.us-east-1.amazonaws.com. It's not "sts.amazonaws.com" as in the Subject CN, nor is it covered by "*.sts.global.vpce.amazonaws.com" in the SAN extension. This means Hostname check will fail. This is a certificate made up by zScaler to appear to be the sts.amazonaws.com endpoint certificate.If you open https://organizations.us-east-1.amazonaws.com/ in your browser, you can see what's really there, with "Amazon Root CA 1" as the Root CA certificate, which Java does have in the default cacerts file. This certificate is fine: The two intermediate certificates 2/3 are being generated by zScaler, probably by this firewall appliance, at runtime. Note they have very short valid dates. The root certificate "Zscaler Root CA", (4) does not exist in Java's cacerts Trust Store. Certificate chain check will therefore fail. That's the certificate that needs adding to the truststore to get this to work. But there are no links in the intermediate certificates for downloading that, and so will need getting from zScaler: zScaler: Adding Custom Certificate to an Application-Specific Trust Store"If you are an end user, you can get the root CA certificate for your organization from your administrator. If you are an administrator, provide your users with the root CA certificate (i.e., Zscaler root CA certificate or custom root CA certificate) that is applicable to your organization. To learn how to download the Zscaler root CA certificate from the ZIA Admin Portal, see Choosing the CA Certificate for SSL/TLS Inspection." Agent log 2026-03-20T16:44:15.014+0000 INFO (Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8) [AWorker:184] Worker starting: HorizontalDiscoveryProbe source: Account Validation2026-03-20T16:44:39.862+0000 DEBUG (Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8) [HorizontalDiscoveryPatternExecutor:65] (67)HorizontalDiscoveryPatternExecutor - Start Executing pattern: id=d911f312730423005ad2db37aef6a735, name=Amazon AWS Service account...2026-03-20T16:44:44.504+0000 ERROR (Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8) [RhinoExceptions:86] com.snc.sw.exception.CommandFailureException: Cloud Request failed.URL: https://organizations.us-east-1.amazonaws.comStatus: No status returned Response: Unable to execute HTTP request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (script_include:AwsApiCommand; line 93)org.mozilla.javascript.JavaScriptException: com.snc.sw.exception.CommandFailureException: Cloud Request failed.URL: https://organizations.us-east-1.amazonaws.comStatus: No status returned Response: Unable to execute HTTP request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (script_include:AwsApiCommand; line 93) at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1200) at script(script_include:AwsApiCommand:93) at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940) at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127) at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25) ... Wrapper log 2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.481 GMT|ClientHello.java:639|Produced ClientHello handshake message (2026/03/20 16:44:44 | "ClientHello": {2026/03/20 16:44:44 | "client version" : "TLSv1.2",2026/03/20 16:44:44 | "random" : "99BDC904BA3C93E4FFE0DEB7F60911F74183C907F5F67CB3D3B7D255E5FAFB4C",2026/03/20 16:44:44 | "session id" : "EE353EFA04B8E1944D4B59E34DB1372069F62BEA9E905BC89299E66232992C2A",2026/03/20 16:44:44 | "cipher suites" : "[TLS_AES_256_GCM_SHA384(0x1302), TLS_AES_128_GCM_SHA256(0x1301), TLS_CHACHA20_POLY1305_SHA256(0x1303), TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384(0xC02C), TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256(0xC02B), TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256(0xCCA9), TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384(0xC030), TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256(0xCCA8), TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256(0xC02F), TLS_DHE_RSA_WITH_AES_256_GCM_SHA384(0x009F), TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256(0xCCAA), TLS_DHE_DSS_WITH_AES_256_GCM_SHA384(0x00A3), TLS_DHE_RSA_WITH_AES_128_GCM_SHA256(0x009E), TLS_DHE_DSS_WITH_AES_128_GCM_SHA256(0x00A2), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384(0xC024), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384(0xC028), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256(0xC023), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256(0xC027), TLS_DHE_RSA_WITH_AES_256_CBC_SHA256(0x006B), TLS_DHE_DSS_WITH_AES_256_CBC_SHA256(0x006A), TLS_DHE_RSA_WITH_AES_128_CBC_SHA256(0x0067), TLS_DHE_DSS_WITH_AES_128_CBC_SHA256(0x0040), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA(0xC00A), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA(0xC014), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA(0xC009), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA(0xC013), TLS_DHE_RSA_WITH_AES_256_CBC_SHA(0x0039), TLS_DHE_DSS_WITH_AES_256_CBC_SHA(0x0038), TLS_DHE_RSA_WITH_AES_128_CBC_SHA(0x0033), TLS_DHE_DSS_WITH_AES_128_CBC_SHA(0x0032), TLS_RSA_WITH_AES_256_GCM_SHA384(0x009D), TLS_RSA_WITH_AES_128_GCM_SHA256(0x009C), TLS_RSA_WITH_AES_256_CBC_SHA256(0x003D), TLS_RSA_WITH_AES_128_CBC_SHA256(0x003C), TLS_RSA_WITH_AES_256_CBC_SHA(0x0035), TLS_RSA_WITH_AES_128_CBC_SHA(0x002F), TLS_EMPTY_RENEGOTIATION_INFO_SCSV(0x00FF)]",2026/03/20 16:44:44 | "compression methods" : "00",2026/03/20 16:44:44 | "extensions" : [2026/03/20 16:44:44 | "server_name (0)": {2026/03/20 16:44:44 | type=host_name (0), value=sts.amazonaws.com2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "status_request (5)": {2026/03/20 16:44:44 | "certificate status type": ocsp2026/03/20 16:44:44 | "OCSP status request": {2026/03/20 16:44:44 | "responder_id": <empty>2026/03/20 16:44:44 | "request extensions": {2026/03/20 16:44:44 | <empty>2026/03/20 16:44:44 | }2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "supported_groups (10)": {2026/03/20 16:44:44 | "versions": [x25519, secp256r1, secp384r1, secp521r1, x448, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "ec_point_formats (11)": {2026/03/20 16:44:44 | "formats": [uncompressed]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "status_request_v2 (17)": {2026/03/20 16:44:44 | "cert status request": {2026/03/20 16:44:44 | "certificate status type": ocsp_multi2026/03/20 16:44:44 | "OCSP status request": {2026/03/20 16:44:44 | "responder_id": <empty>2026/03/20 16:44:44 | "request extensions": {2026/03/20 16:44:44 | <empty>2026/03/20 16:44:44 | }2026/03/20 16:44:44 | }2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "extended_master_secret (23)": {2026/03/20 16:44:44 | <empty>2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "session_ticket (35)": {2026/03/20 16:44:44 | <empty>2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "signature_algorithms (13)": {2026/03/20 16:44:44 | "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp521r1_sha512, ed25519, ed448, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "supported_versions (43)": {2026/03/20 16:44:44 | "versions": [TLSv1.3, TLSv1.2]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "psk_key_exchange_modes (45)": {2026/03/20 16:44:44 | "ke_modes": [psk_dhe_ke]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "signature_algorithms_cert (50)": {2026/03/20 16:44:44 | "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp521r1_sha512, ed25519, ed448, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "key_share (51)": {2026/03/20 16:44:44 | "client_shares": [ 2026/03/20 16:44:44 | {2026/03/20 16:44:44 | "named group": x255192026/03/20 16:44:44 | "key_exchange": {2026/03/20 16:44:44 | 0000: 0A 68 2B D7 89 0E 6A 60 91 56 98 06 18 3C 24 75 .h+...j`.V...<$u2026/03/20 16:44:44 | 0010: 49 2B 87 28 4D F9 60 2F 40 F5 B3 37 A3 4D 40 55 I+.(M.`/@..7.M@U2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | "named group": secp256r12026/03/20 16:44:44 | "key_exchange": {2026/03/20 16:44:44 | 0000: 04 19 CF 69 13 A7 0B 3B D6 D2 42 16 57 B1 4B A2 ...i...;..B.W.K.2026/03/20 16:44:44 | 0010: 8B B8 81 BD C0 6E 0D 8C 64 65 27 92 DB 20 90 7B .....n..de'.. ..2026/03/20 16:44:44 | 0020: 5A 25 E6 9F F1 68 23 AA FE A1 6B 34 84 4E 73 D6 Z%...h#...k4.Ns.2026/03/20 16:44:44 | 0030: 10 9A 06 D7 0F 93 1A E8 8E 0E F8 E0 47 CB B6 8D ............G...2026/03/20 16:44:44 | 0040: 07 2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | )2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.497 GMT|ServerHello.java:897|Consuming ServerHello handshake message (2026/03/20 16:44:44 | "ServerHello": {2026/03/20 16:44:44 | "server version" : "TLSv1.2",2026/03/20 16:44:44 | "random" : "17217016BB70A38E0A7BA90B0230443D8DC1B9378DE565ACBF8892AADE45BBF7",2026/03/20 16:44:44 | "session id" : "EE353EFA04B8E1944D4B59E34DB1372069F62BEA9E905BC89299E66232992C2A",2026/03/20 16:44:44 | "cipher suite" : "TLS_AES_256_GCM_SHA384(0x1302)",2026/03/20 16:44:44 | "compression methods" : "00",2026/03/20 16:44:44 | "extensions" : [2026/03/20 16:44:44 | "supported_versions (43)": {2026/03/20 16:44:44 | "selected version": [TLSv1.3]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | "key_share (51)": {2026/03/20 16:44:44 | "server_share": {2026/03/20 16:44:44 | "named group": secp256r12026/03/20 16:44:44 | "key_exchange": {2026/03/20 16:44:44 | 0000: 04 55 8E 53 4F 2C CB 41 E5 3A 48 76 36 4F 98 36 .U.SO,.A.:Hv6O.62026/03/20 16:44:44 | 0010: 50 9D 32 FA BD 86 8F 9B 5C C2 42 6A F4 53 3C 9F P.2.....\.Bj.S<.2026/03/20 16:44:44 | 0020: 52 45 22 FA 36 5D 80 A2 67 61 9A C3 08 D0 79 AB RE".6]..ga....y.2026/03/20 16:44:44 | 0030: 74 4D 4E BD 27 62 F3 96 43 D4 8B BF 2F 60 29 12 tMN.'b..C.../`).2026/03/20 16:44:44 | 0040: 2E 2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | }2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | )2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.497 GMT|SSLExtensions.java:204|Consumed extension: supported_versions2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.497 GMT|ServerHello.java:993|Negotiated protocol version: TLSv1.32026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: server_name2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: max_fragment_length2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: status_request2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: ec_point_formats2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: application_layer_protocol_negotiation2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: status_request_v22026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: extended_master_secret2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: session_ticket2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:204|Consumed extension: supported_versions2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:204|Consumed extension: key_share2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:175|Ignore unsupported extension: renegotiation_info2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|PreSharedKeyExtension.java:924|Handling pre_shared_key absence.2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: server_name2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: max_fragment_length2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: status_request2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: ec_point_formats2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: application_layer_protocol_negotiation2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: status_request_v22026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: extended_master_secret2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: session_ticket2026/03/20 16:44:44 | javax.net.ssl|WARNING|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:227|Ignore impact of unsupported extension: supported_versions2026/03/20 16:44:44 | javax.net.ssl|WARNING|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:227|Ignore impact of unsupported extension: key_share2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: renegotiation_info2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.498 GMT|SSLExtensions.java:219|Ignore unavailable extension: pre_shared_key2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.499 GMT|SSLCipher.java:1870|KeyLimit read side: algorithm = AES/GCM/NOPADDING:KEYUPDATE2026/03/20 16:44:44 | countdown value = 1374389534722026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.499 GMT|SSLCipher.java:2024|KeyLimit write side: algorithm = AES/GCM/NOPADDING:KEYUPDATE2026/03/20 16:44:44 | countdown value = 1374389534722026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|ChangeCipherSpec.java:246|Consuming ChangeCipherSpec message2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|EncryptedExtensions.java:171|Consuming EncryptedExtensions handshake message (2026/03/20 16:44:44 | "EncryptedExtensions": [2026/03/20 16:44:44 | <no extension>2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | )2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:185|Ignore unavailable extension: server_name2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:185|Ignore unavailable extension: max_fragment_length2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:185|Ignore unavailable extension: supported_groups2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:219|Ignore unavailable extension: server_name2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:219|Ignore unavailable extension: max_fragment_length2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:219|Ignore unavailable extension: supported_groups2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.500 GMT|SSLExtensions.java:219|Ignore unavailable extension: application_layer_protocol_negotiation2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.501 GMT|CertificateMessage.java:1166|Consuming server Certificate handshake message (2026/03/20 16:44:44 | "Certificate": {2026/03/20 16:44:44 | "certificate_request_context": "",2026/03/20 16:44:44 | "certificate_list": [ 2026/03/20 16:44:44 | {2026/03/20 16:44:44 | "certificate" : {2026/03/20 16:44:44 | "version" : "v3",2026/03/20 16:44:44 | "serial number" : "7b:ff:56:d7:43:20:31:32:34:19:e6:c4:8c:6c:62:09",2026/03/20 16:44:44 | "signature algorithm": "SHA256withRSA",2026/03/20 16:44:44 | "issuer" : "CN="Zscaler Intermediate Root CA (zscaler.net) (t) ", OU=Zscaler Inc., O=Zscaler Inc., ST=California, C=US",2026/03/20 16:44:44 | "not before" : "2026-03-20 08:43:50.000 GMT",2026/03/20 16:44:44 | "not after" : "2026-03-28 05:19:26.000 GMT",2026/03/20 16:44:44 | "subject" : "OU=Zscaler Inc., O=Zscaler Inc., CN=sts.amazonaws.com",2026/03/20 16:44:44 | "subject public key" : "RSA",2026/03/20 16:44:44 | "extensions" : [2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.35 Criticality=false2026/03/20 16:44:44 | AuthorityKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: CE 61 5D D2 F5 66 F0 8D C8 D5 07 B6 63 A6 A4 E4 .a]..f......c...2026/03/20 16:44:44 | 0010: 9F 1E 6C 26 ..l&2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.19 Criticality=true2026/03/20 16:44:44 | BasicConstraints:[2026/03/20 16:44:44 | CA:false2026/03/20 16:44:44 | PathLen: undefined2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.31 Criticality=false2026/03/20 16:44:44 | CRLDistributionPoints [2026/03/20 16:44:44 | [DistributionPoint:2026/03/20 16:44:44 | [URIName: http://gateway.zscaler.net/zscaler-zscrl--4-1.crl]2026/03/20 16:44:44 | , DistributionPoint:2026/03/20 16:44:44 | [URIName: http://gateway6.zscaler.net/zscaler-zscrl--4-1.crl]2026/03/20 16:44:44 | ]]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.37 Criticality=false2026/03/20 16:44:44 | ExtendedKeyUsages [2026/03/20 16:44:44 | serverAuth2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.15 Criticality=true2026/03/20 16:44:44 | KeyUsage [2026/03/20 16:44:44 | DigitalSignature2026/03/20 16:44:44 | Key_Encipherment2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.17 Criticality=false2026/03/20 16:44:44 | SubjectAlternativeName [2026/03/20 16:44:44 | DNSName: sts.amazonaws.com2026/03/20 16:44:44 | DNSName: *.sts.global.vpce.amazonaws.com2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.14 Criticality=false2026/03/20 16:44:44 | SubjectKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: BF 00 BA E8 72 CC 48 49 D1 14 57 F9 83 43 F9 0C ....r.HI..W..C..2026/03/20 16:44:44 | 0010: D4 B0 55 BF ..U.2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | ]}2026/03/20 16:44:44 | "extensions": {2026/03/20 16:44:44 | <no extension>2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | "certificate" : {2026/03/20 16:44:44 | "version" : "v3",2026/03/20 16:44:44 | "serial number" : "69:b4:ef:de",2026/03/20 16:44:44 | "signature algorithm": "SHA256withRSA",2026/03/20 16:44:44 | "issuer" : "EMAILADDRESS=support@zscaler.com, CN=Zscaler Intermediate Root CA (zscaler.net), OU=Zscaler Inc., O=Zscaler Inc., ST=California, C=US",2026/03/20 16:44:44 | "not before" : "2026-03-14 05:19:26.000 GMT",2026/03/20 16:44:44 | "not after" : "2026-03-28 05:19:26.000 GMT",2026/03/20 16:44:44 | "subject" : "CN="Zscaler Intermediate Root CA (zscaler.net) (t) ", OU=Zscaler Inc., O=Zscaler Inc., ST=California, C=US",2026/03/20 16:44:44 | "subject public key" : "RSA",2026/03/20 16:44:44 | "extensions" : [2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.35 Criticality=false2026/03/20 16:44:44 | AuthorityKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: 4C 92 AC 9A A5 B4 2A 93 11 F7 2B 29 FF 59 CB 42 L.....*...+).Y.B2026/03/20 16:44:44 | 0010: 72 E6 2C 61 r.,a2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.19 Criticality=true2026/03/20 16:44:44 | BasicConstraints:[2026/03/20 16:44:44 | CA:true2026/03/20 16:44:44 | PathLen: no limit2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.31 Criticality=false2026/03/20 16:44:44 | CRLDistributionPoints [2026/03/20 16:44:44 | [DistributionPoint:2026/03/20 16:44:44 | [URIName: http://gateway.zscaler.net/crl/zsn-kek--4-1.crl]2026/03/20 16:44:44 | ]]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.15 Criticality=true2026/03/20 16:44:44 | KeyUsage [2026/03/20 16:44:44 | DigitalSignature2026/03/20 16:44:44 | Non_repudiation2026/03/20 16:44:44 | Key_Encipherment2026/03/20 16:44:44 | Data_Encipherment2026/03/20 16:44:44 | Key_Agreement2026/03/20 16:44:44 | Key_CertSign2026/03/20 16:44:44 | Crl_Sign2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.14 Criticality=false2026/03/20 16:44:44 | SubjectKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: CE 61 5D D2 F5 66 F0 8D C8 D5 07 B6 63 A6 A4 E4 .a]..f......c...2026/03/20 16:44:44 | 0010: 9F 1E 6C 26 ..l&2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | ]}2026/03/20 16:44:44 | "extensions": {2026/03/20 16:44:44 | <no extension>2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | "certificate" : {2026/03/20 16:44:44 | "version" : "v3",2026/03/20 16:44:44 | "serial number" : "00:db:be:98:2d:89:b7:7b:97",2026/03/20 16:44:44 | "signature algorithm": "SHA256withRSA",2026/03/20 16:44:44 | "issuer" : "EMAILADDRESS=support@zscaler.com, CN=Zscaler Root CA, OU=Zscaler Inc., O=Zscaler Inc., L=San Jose, ST=California, C=US",2026/03/20 16:44:44 | "not before" : "2025-02-02 16:38:35.000 GMT",2026/03/20 16:44:44 | "not after" : "2052-06-10 17:38:35.000 BST",2026/03/20 16:44:44 | "subject" : "EMAILADDRESS=support@zscaler.com, CN=Zscaler Intermediate Root CA (zscaler.net), OU=Zscaler Inc., O=Zscaler Inc., ST=California, C=US",2026/03/20 16:44:44 | "subject public key" : "RSA",2026/03/20 16:44:44 | "extensions" : [2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.35 Criticality=false2026/03/20 16:44:44 | AuthorityKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: B9 B7 DD 4A CD C3 0E 0C 86 9D 5D DF EC 1C 04 69 ...J......]....i2026/03/20 16:44:44 | 0010: C5 4E 98 DF .N..2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | [EMAILADDRESS=support@zscaler.com, CN=Zscaler Root CA, OU=Zscaler Inc., O=Zscaler Inc., L=San Jose, ST=California, C=US]2026/03/20 16:44:44 | SerialNumber: 00:db:be:98:2d:89:b7:7b:932026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.19 Criticality=true2026/03/20 16:44:44 | BasicConstraints:[2026/03/20 16:44:44 | CA:true2026/03/20 16:44:44 | PathLen: no limit2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.31 Criticality=false2026/03/20 16:44:44 | CRLDistributionPoints [2026/03/20 16:44:44 | [DistributionPoint:2026/03/20 16:44:44 | [URIName: http://gateway.zscaler.net/crl/zsn-int.crl]2026/03/20 16:44:44 | ]]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.15 Criticality=true2026/03/20 16:44:44 | KeyUsage [2026/03/20 16:44:44 | DigitalSignature2026/03/20 16:44:44 | Key_CertSign2026/03/20 16:44:44 | Crl_Sign2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | },2026/03/20 16:44:44 | {2026/03/20 16:44:44 | ObjectId: 2.5.29.14 Criticality=false2026/03/20 16:44:44 | SubjectKeyIdentifier [2026/03/20 16:44:44 | KeyIdentifier [2026/03/20 16:44:44 | 0000: 4C 92 AC 9A A5 B4 2A 93 11 F7 2B 29 FF 59 CB 42 L.....*...+).Y.B2026/03/20 16:44:44 | 0010: 72 E6 2C 61 r.,a2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | ]}2026/03/20 16:44:44 | "extensions": {2026/03/20 16:44:44 | <no extension>2026/03/20 16:44:44 | }2026/03/20 16:44:44 | },2026/03/20 16:44:44 | ]2026/03/20 16:44:44 | }2026/03/20 16:44:44 | )2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.501 GMT|SSLExtensions.java:185|Ignore unavailable extension: status_request2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.501 GMT|SSLExtensions.java:185|Ignore unavailable extension: status_request2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.501 GMT|SSLExtensions.java:185|Ignore unavailable extension: status_request2026/03/20 16:44:44 | javax.net.ssl|ERROR|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.502 GMT|TransportContext.java:375|Fatal (CERTIFICATE_UNKNOWN): PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (2026/03/20 16:44:44 | "throwable" : {2026/03/20 16:44:44 | sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target2026/03/20 16:44:44 | at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)2026/03/20 16:44:44 | at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)2026/03/20 16:44:44 | at java.base/sun.security.validator.Validator.validate(Validator.java:264)2026/03/20 16:44:44 | at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)2026/03/20 16:44:44 | at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)2026/03/20 16:44:44 | at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1335)2026/03/20 16:44:44 | at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1226)2026/03/20 16:44:44 | at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1169)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)2026/03/20 16:44:44 | at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)2026/03/20 16:44:44 | at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458)2026/03/20 16:44:44 | at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:206)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1510)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1425)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)2026/03/20 16:44:44 | at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)2026/03/20 16:44:44 | at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)2026/03/20 16:44:44 | at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.upgrade(DefaultHttpClientConnectionOperator.java:191)2026/03/20 16:44:44 | at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.upgrade(PoolingHttpClientConnectionManager.java:392)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)2026/03/20 16:44:44 | at java.base/java.lang.reflect.Method.invoke(Method.java:569)2026/03/20 16:44:44 | at com.amazonaws.http.conn.ClientConnectionManagerFactory$Handler.invoke(ClientConnectionManagerFactory.java:76)2026/03/20 16:44:44 | at com.amazonaws.http.conn.$Proxy109.upgrade(Unknown Source)2026/03/20 16:44:44 | at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:428)2026/03/20 16:44:44 | at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)2026/03/20 16:44:44 | at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)2026/03/20 16:44:44 | at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)2026/03/20 16:44:44 | at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)2026/03/20 16:44:44 | at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)2026/03/20 16:44:44 | at com.amazonaws.http.apache.client.impl.SdkHttpClient.execute(SdkHttpClient.java:72)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1346)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1157)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:814)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:781)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:755)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:715)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:697)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:561)2026/03/20 16:44:44 | at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:541)2026/03/20 16:44:44 | at com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClient.doInvoke(AWSSecurityTokenServiceClient.java:1731)2026/03/20 16:44:44 | at com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClient.invoke(AWSSecurityTokenServiceClient.java:1698)2026/03/20 16:44:44 | at com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClient.invoke(AWSSecurityTokenServiceClient.java:1687)2026/03/20 16:44:44 | at com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClient.executeGetSessionToken(AWSSecurityTokenServiceClient.java:1625)2026/03/20 16:44:44 | at com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClient.getSessionToken(AWSSecurityTokenServiceClient.java:1593)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)2026/03/20 16:44:44 | at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)2026/03/20 16:44:44 | at java.base/java.lang.reflect.Method.invoke(Method.java:569)2026/03/20 16:44:44 | at org.mozilla.javascript.MemberBox.invoke(MemberBox.java:229)2026/03/20 16:44:44 | at org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:295)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3197)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall2(ScriptRuntime.java:3296)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doCall(ScriptRuntime.java:3204)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpretLoop(Interpreter.java:1968)2026/03/20 16:44:44 | at org.mozilla.javascript.Interpreter.interpret(Interpreter.java:940)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.lambda$call$0(InterpretedFunction.java:127)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScriptContext$ScriptCaller.call(MIDScriptContext.java:25)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.call(InterpretedFunction.java:125)2026/03/20 16:44:44 | at org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:722)2026/03/20 16:44:44 | at org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:4812)2026/03/20 16:44:44 | at org.mozilla.javascript.InterpretedFunction.exec(InterpretedFunction.java:141)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScript.executeCompiledScript(MIDScript.java:294)2026/03/20 16:44:44 | at com.service_now.mid.script.MIDScript.evaluate(MIDScript.java:181)2026/03/20 16:44:44 | at com.snc.sw.kb.lang.closure.EvalClosure.executeJavascriptWithDetailedException(EvalClosure.java:117)2026/03/20 16:44:44 | at com.snc.sw.kb.lang.closure.CustomOperationClosure.runScript(CustomOperationClosure.java:285)2026/03/20 16:44:44 | at com.snc.sw.kb.lang.closure.CustomOperationClosure.function(CustomOperationClosure.java:115)2026/03/20 16:44:44 | at com.snc.sw.kb.lang.closure.CustomOperationClosure.function(CustomOperationClosure.java:36)2026/03/20 16:44:44 | at com.snc.sw.pattern.AbstractPatternExecutor.executeStep(AbstractPatternExecutor.java:820)2026/03/20 16:44:44 | at com.snc.sw.pattern.DefaultPatternExecutor.executeNormalStep(DefaultPatternExecutor.java:138)2026/03/20 16:44:44 | at com.snc.sw.pattern.DefaultPatternExecutor.executeStepsImpl(DefaultPatternExecutor.java:60)2026/03/20 16:44:44 | at com.snc.sw.pattern.DefaultPatternExecutor.executeStepsImpl(DefaultPatternExecutor.java:37)2026/03/20 16:44:44 | at com.snc.sw.pattern.AbstractPatternExecutor.executeSteps(AbstractPatternExecutor.java:741)2026/03/20 16:44:44 | at com.snc.sw.pattern.HorizontalDiscoveryPatternExecutor.executeIdentification(HorizontalDiscoveryPatternExecutor.java:236)2026/03/20 16:44:44 | at com.snc.sw.pattern.HorizontalDiscoveryPatternExecutor.runIdentificationSection(HorizontalDiscoveryPatternExecutor.java:216)2026/03/20 16:44:44 | at com.snc.sw.pattern.HorizontalDiscoveryPatternExecutor.runHostDiscovery(HorizontalDiscoveryPatternExecutor.java:196)2026/03/20 16:44:44 | at com.snc.sw.pattern.HorizontalDiscoveryPatternExecutor.executeIdentifications(HorizontalDiscoveryPatternExecutor.java:134)2026/03/20 16:44:44 | at com.snc.sw.pattern.HorizontalDiscoveryPatternExecutor.executePattern(HorizontalDiscoveryPatternExecutor.java:69)2026/03/20 16:44:44 | at com.service_now.mid.probe.HorizontalDiscoveryProbe.runPattern(HorizontalDiscoveryProbe.java:410)2026/03/20 16:44:44 | at com.service_now.mid.probe.HorizontalDiscoveryProbe.runProbe(HorizontalDiscoveryProbe.java:251)2026/03/20 16:44:44 | at com.service_now.mid.probe.ServiceWatchProbe.probe(ServiceWatchProbe.java:40)2026/03/20 16:44:44 | at com.service_now.mid.probe.AProbe.process(AProbe.java:160)2026/03/20 16:44:44 | at com.service_now.mid.queue_worker.AWorker.runWorker(AWorker.java:187)2026/03/20 16:44:44 | at com.service_now.mid.queue_worker.AWorkerThread.run(AWorkerThread.java:20)2026/03/20 16:44:44 | at com.service_now.mid.threadpool.ResourceUserQueue$RunnableProxy.run(ResourceUserQueue.java:643)2026/03/20 16:44:44 | at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)2026/03/20 16:44:44 | at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)2026/03/20 16:44:44 | at java.base/java.lang.Thread.run(Thread.java:840)2026/03/20 16:44:44 | Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target2026/03/20 16:44:44 | at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)2026/03/20 16:44:44 | at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)2026/03/20 16:44:44 | at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)2026/03/20 16:44:44 | at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)2026/03/20 16:44:44 | ... 171 more}2026/03/20 16:44:44 | 2026/03/20 16:44:44 | )2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.502 GMT|SSLSocketImpl.java:1759|close the underlying socket2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.503 GMT|SSLSocketImpl.java:1785|close the SSL connection (passive)2026/03/20 16:44:44 | javax.net.ssl|INFO|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.556 GMT|AlpnExtension.java:182|No available application protocols2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.556 GMT|SSLExtensions.java:272|Ignore, context unavailable extension: application_layer_protocol_negotiation2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.556 GMT|SessionTicketExtension.java:353|Stateless resumption supported2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.556 GMT|SSLExtensions.java:272|Ignore, context unavailable extension: cookie2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.557 GMT|SSLExtensions.java:272|Ignore, context unavailable extension: renegotiation_info2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.557 GMT|PreSharedKeyExtension.java:661|No session to resume.2026/03/20 16:44:44 | javax.net.ssl|DEBUG|34|Worker-Interactive:HorizontalDiscoveryProbe-8f90d13cfb77b69437c4f882beefdca8|2026-03-20 16:44:44.557 GMT|SSLExtensions.java:272|Ignore, context unavailable extension: pre_shared_key Working Example for MID Server to Instance connection, where the expected Digicert Instance certificate is seen Explanation This is taken from a default setup Australia Patch 0 MID Server's wrapper.log, immediately after startup, while with -Djavax.net.debug=ssl:handshake is added to wrapper overrides for the erapper.log, and mid.log.level=debug for agent0.log.0. "20260326_A_Laptop_MID" is the MID Server's name. "empdpiper.service-now.com" is the URL of the instance. Yellow are for interesting lines that help see where you are. From those we see the request is to the instance "empdpiper.service-now.com". The client/server negotiated TLS 1.2 for the connection because the MID Server can do 1.2 and 1.3, but the instance can only do 1.2 at the moment. Green is the Instance certificate "*.service-now.com", which expires on 2026-04-30 (which on 2026/03/26 was fine). *.service-now.com is in the Subject CN, and also in SubjectAlternativeName, even though it only needs to be in one or the other for the Hostname check to pass.And uses OCSP responder "http://ocsp.digicert.com" which will be needed for the Revocation check. Purple is the Intermediate certificate "DigiCert Global G2 TLS RSA SHA256 2020 CA1", which expires on 2031-03-30. That also uses OCSP responder "http://ocsp.digicert.com" which will be needed for the Revocation check.Downloading that from http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt and viewing confirms what we see in the logging: Red is the Root CA certificate "DigiCert Global Root G2", which is already in the default Java cacerts Trust Store, and so this certificate chain is deemed to be fine, and passes the Certificate Chain Check.Downloading that from http://cacerts.digicert.com/DigiCertGlobalRootG2.crt and viewing it confirms what should be in the cacerts file: Agent log 2026-03-26T12:07:21.268+0100 DEBUG (StartupSequencer) [StandardKeyPairsProvider:131] Getting key pair from cache with handle: DefaultSecurityKeyPairHandle2026-03-26T12:07:21.283+0100 DEBUG (StartupSequencer) [TLSPolicyService:34] MIDSecPolicy: calculating security Policy to be applied on empdpiper.service-now.com 2026-03-26T12:07:21.283+0100 DEBUG (StartupSequencer) [AbstractPolicyService:107] MIDSecPolicy: trying to resolve a security policy for a hostname [empdpiper.service-now.com]2026-03-26T12:07:21.284+0100 DEBUG (StartupSequencer) [TLSPolicyService:54] MIDSecPolicy: Introducing the resolved cert policy to the fast cache!2026-03-26T12:07:21.284+0100 DEBUG (StartupSequencer) [TLSPolicyService:57] MIDSecPolicy: Security policy selected -> null [SYSTEM_DEFAULTS] for target -> empdpiper.service-now.com2026-03-26T12:07:21.284+0100 DEBUG (StartupSequencer) [MIDTLSPolicy:129] MIDSecPolicy: Certificate check for host[empdpiper.service-now.com] is true2026-03-26T12:07:21.997+0100 DEBUG (StartupSequencer) [TLSPolicyService:34] MIDSecPolicy: calculating security Policy to be applied on empdpiper.service-now.com 2026-03-26T12:07:21.997+0100 DEBUG (StartupSequencer) [TLSPolicyService:38] MIDSecPolicy: returning a security policy from the fast cache!2026-03-26T12:07:21.997+0100 DEBUG (StartupSequencer) [MIDTLSPolicy:41] MIDSecPolicy: hostname verification for host[empdpiper.service-now.com] is true2026-03-26T12:07:21.997+0100 DEBUG (StartupSequencer) [TLSPolicyService:34] MIDSecPolicy: calculating security Policy to be applied on empdpiper.service-now.com 2026-03-26T12:07:21.997+0100 DEBUG (StartupSequencer) [TLSPolicyService:38] MIDSecPolicy: returning a security policy from the fast cache!2026-03-26T12:07:21.998+0100 DEBUG (StartupSequencer) [MIDTLSPolicy:96] MIDSecPolicy: Certificate revocation check for host[empdpiper.service-now.com] is false2026-03-26T12:07:22.007+0100 INFO (StartupSequencer) [OCSPCheck:167] OCSPCheck adding BouncyCastle provider at -12026-03-26T12:07:22.007+0100 INFO (StartupSequencer) [OCSPCheck:175] OCSPCheckedCertificateCache build with max capacity 322026-03-26T12:07:22.007+0100 INFO (StartupSequencer) [OCSPCheck:189] OCSPRevokedCertificateCache build with max capacity 162026-03-26T12:07:22.007+0100 INFO (StartupSequencer) [OCSPCheck:203] OCSPTimeoutErrorCache build with max capacity 162026-03-26T12:07:22.009+0100 DEBUG (StartupSequencer) [OutboundHTTPClientGCFInvoker:106] OutboundHTTPClientGCFInvoker - GCF Collector not set2026-03-26T12:07:23.015+0100 INFO (StartupSequencer) [UserConfigTest:68] SOAP basic authentication is enabled2026-03-26T12:07:23.015+0100 INFO (StartupSequencer) [UserConfigTest:72] SOAP strict security is enabled2026-03-26T12:07:23.015+0100 INFO (StartupSequencer) [UserConfigTest:74] User mid_user has all necessary roles2026-03-26T12:07:23.016+0100 DEBUG (StartupSequencer) [StandardKeyPairsProvider:131] Getting key pair from cache with handle: DefaultSecurityKeyPairHandle2026-03-26T12:07:23.241+0100 INFO (StartupSequencer) [InstanceConnectivityTest:36] Successfully connected to instance: Wrapper log 2026/03/26 12:07:06 | Starting the ServiceNow MID Server_20260326_A_Laptop_MID service...2026/03/26 12:07:06 | --> Wrapper Started as Service2026/03/26 12:07:06 | Java Service Wrapper Professional Edition 64-bit 3.5.572026/03/26 12:07:06 | Copyright (C) 1999-2024 Tanuki Software, Ltd. All Rights Reserved.2026/03/26 12:07:06 | https://wrapper.tanukisoftware.com2026/03/26 12:07:06 | Licensed to ServiceNow, Inc. for MID2026/03/26 12:07:06 | 2026/03/26 12:07:08 | Launching a JVM...2026/03/26 12:07:09 | WrapperManager: Initializing...2026/03/26 12:07:09 | Logger for 'glide' has not been configured by the container, configuring now:2026/03/26 12:07:10 | Configuring log handler: com.service_now.mid.logging.MIDLogFileHandler2026/03/26 12:07:10 | Setting useParentHandlers=false for Logger 'glide'2026/03/26 12:07:10 | Overriding formatter to: com.service_now.mid.logging.MidLogFormatter (for handler: com.service_now.mid.logging.MIDLogFileHandler)2026/03/26 12:07:10 | FIPS Enforced Mode: false2026/03/26 12:07:10 | JVM property java.security.egd: file:/dev/urandom2026/03/26 12:07:11 | Waiting to start...2026/03/26 12:07:13 | ServiceNow MID Server_20260326_A_Laptop_MID service started.2026/03/26 12:07:17 | WARNING: A terminally deprecated method in java.lang.System has been called2026/03/26 12:07:17 | WARNING: System::setSecurityManager has been called by com.snc.llama.jvm.internal.SystemPassthrough (file:/C:/mid/agent/lib/mid.jar)2026/03/26 12:07:17 | WARNING: Please consider reporting this to the maintainers of com.snc.llama.jvm.internal.SystemPassthrough2026/03/26 12:07:17 | WARNING: System::setSecurityManager will be removed in a future release2026/03/26 12:07:17 | setting up default SSLSocketFactory2026/03/26 12:07:17 | class com.service_now.mid.security.policy.PolicyBasedSSLSocketFactory is loaded2026/03/26 12:07:17 | javax.net.ssl|DEBUG|F1|MIDServer|2026-03-26 12:07:17.666 CET|SSLCipher.java:432|jdk.tls.keyLimits: entry = AES/GCM/NoPadding KeyUpdate 2^37. AES/GCM/NOPADDING:KEYUPDATE = 1374389534722026/03/26 12:07:17 | javax.net.ssl|DEBUG|F1|MIDServer|2026-03-26 12:07:17.674 CET|SSLCipher.java:432|jdk.tls.keyLimits: entry = ChaCha20-Poly1305 KeyUpdate 2^37. CHACHA20-POLY1305:KEYUPDATE = 1374389534722026/03/26 12:07:17 | instantiated an instance of class com.service_now.mid.security.policy.PolicyBasedSSLSocketFactory2026/03/26 12:07:21 | javax.net.ssl|INFO|D3|StartupSequencer|2026-03-26 12:07:21.364 CET|AlpnExtension.java:179|No available application protocols2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.364 CET|SSLExtensions.java:272|Ignore, context unavailable extension: application_layer_protocol_negotiation2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.364 CET|SessionTicketExtension.java:352|Stateless resumption supported2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.365 CET|SSLExtensions.java:272|Ignore, context unavailable extension: cookie2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.406 CET|SSLExtensions.java:272|Ignore, context unavailable extension: renegotiation_info2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.406 CET|PreSharedKeyExtension.java:659|No session to resume.2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.406 CET|SSLExtensions.java:272|Ignore, context unavailable extension: pre_shared_key2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.417 CET|ClientHello.java:638|Produced ClientHello handshake message (2026/03/26 12:07:21 | "ClientHello": {2026/03/26 12:07:21 | "client version" : "TLSv1.2",2026/03/26 12:07:21 | "random" : "187669428C9FAA562C31CB1648214D515349CF57244A7B953339C21757BD6E37",2026/03/26 12:07:21 | "session id" : "C8F6AE913811FB48C477C10DC30F9C75668D7AC2FD81A9A0B158628044848E5B",2026/03/26 12:07:21 | "cipher suites" : "[TLS_AES_256_GCM_SHA384(0x1302), TLS_AES_128_GCM_SHA256(0x1301), TLS_CHACHA20_POLY1305_SHA256(0x1303), TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384(0xC02C), TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256(0xC02B), TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256(0xCCA9), TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384(0xC030), TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256(0xCCA8), TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256(0xC02F), TLS_DHE_RSA_WITH_AES_256_GCM_SHA384(0x009F), TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256(0xCCAA), TLS_DHE_DSS_WITH_AES_256_GCM_SHA384(0x00A3), TLS_DHE_RSA_WITH_AES_128_GCM_SHA256(0x009E), TLS_DHE_DSS_WITH_AES_128_GCM_SHA256(0x00A2), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384(0xC024), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384(0xC028), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256(0xC023), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256(0xC027), TLS_DHE_RSA_WITH_AES_256_CBC_SHA256(0x006B), TLS_DHE_DSS_WITH_AES_256_CBC_SHA256(0x006A), TLS_DHE_RSA_WITH_AES_128_CBC_SHA256(0x0067), TLS_DHE_DSS_WITH_AES_128_CBC_SHA256(0x0040), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA(0xC00A), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA(0xC014), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA(0xC009), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA(0xC013), TLS_DHE_RSA_WITH_AES_256_CBC_SHA(0x0039), TLS_DHE_DSS_WITH_AES_256_CBC_SHA(0x0038), TLS_DHE_RSA_WITH_AES_128_CBC_SHA(0x0033), TLS_DHE_DSS_WITH_AES_128_CBC_SHA(0x0032), TLS_RSA_WITH_AES_256_GCM_SHA384(0x009D), TLS_RSA_WITH_AES_128_GCM_SHA256(0x009C), TLS_RSA_WITH_AES_256_CBC_SHA256(0x003D), TLS_RSA_WITH_AES_128_CBC_SHA256(0x003C), TLS_RSA_WITH_AES_256_CBC_SHA(0x0035), TLS_RSA_WITH_AES_128_CBC_SHA(0x002F), TLS_EMPTY_RENEGOTIATION_INFO_SCSV(0x00FF)]",2026/03/26 12:07:21 | "compression methods" : "00",2026/03/26 12:07:21 | "extensions" : [2026/03/26 12:07:21 | "server_name (0)": {2026/03/26 12:07:21 | type=host_name (0), value=empdpiper.service-now.com2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "status_request (5)": {2026/03/26 12:07:21 | "certificate status type": ocsp2026/03/26 12:07:21 | "OCSP status request": {2026/03/26 12:07:21 | "responder_id": <empty>2026/03/26 12:07:21 | "request extensions": {2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | }2026/03/26 12:07:21 | }2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "supported_groups (10)": {2026/03/26 12:07:21 | "named groups": [x25519, secp256r1, secp384r1, secp521r1, x448, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "ec_point_formats (11)": {2026/03/26 12:07:21 | "formats": [uncompressed]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "status_request_v2 (17)": {2026/03/26 12:07:21 | "cert status request": {2026/03/26 12:07:21 | "certificate status type": ocsp_multi2026/03/26 12:07:21 | "OCSP status request": {2026/03/26 12:07:21 | "responder_id": <empty>2026/03/26 12:07:21 | "request extensions": {2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | }2026/03/26 12:07:21 | }2026/03/26 12:07:21 | }2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "extended_master_secret (23)": {2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "session_ticket (35)": {2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "signature_algorithms (13)": {2026/03/26 12:07:21 | "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp521r1_sha512, ed25519, ed448, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "supported_versions (43)": {2026/03/26 12:07:21 | "versions": [TLSv1.3, TLSv1.2]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "psk_key_exchange_modes (45)": {2026/03/26 12:07:21 | "ke_modes": [psk_dhe_ke]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "signature_algorithms_cert (50)": {2026/03/26 12:07:21 | "signature schemes": [ecdsa_secp256r1_sha256, ecdsa_secp384r1_sha384, ecdsa_secp521r1_sha512, ed25519, ed448, rsa_pss_rsae_sha256, rsa_pss_rsae_sha384, rsa_pss_rsae_sha512, rsa_pss_pss_sha256, rsa_pss_pss_sha384, rsa_pss_pss_sha512, rsa_pkcs1_sha256, rsa_pkcs1_sha384, rsa_pkcs1_sha512, dsa_sha256, ecdsa_sha1, rsa_pkcs1_sha1, dsa_sha1]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "key_share (51)": {2026/03/26 12:07:21 | "client_shares": [ 2026/03/26 12:07:21 | {2026/03/26 12:07:21 | "named group": x255192026/03/26 12:07:21 | "key_exchange": {2026/03/26 12:07:21 | 0000: F1 0C D0 01 F1 06 05 F4 28 E2 60 25 10 E8 D5 1A ........(.`%....2026/03/26 12:07:21 | 0010: 49 F8 A1 73 6C AB 7C 24 95 74 49 B8 F0 19 91 5E I..sl..$.tI....^2026/03/26 12:07:21 | }2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | "named group": secp256r12026/03/26 12:07:21 | "key_exchange": {2026/03/26 12:07:21 | 0000: 04 E8 25 3B 3D 31 8F F5 A0 BB 8C AA CB 20 A7 4C ..%;=1....... .L2026/03/26 12:07:21 | 0010: 8C 78 1F 0F AA 3C 90 FD 35 A1 F3 1C 97 95 AB B9 .x...<..5.......2026/03/26 12:07:21 | 0020: 17 31 90 13 CE 00 0A C5 38 EB 4A 3B F4 FD 23 4D .1......8.J;..#M2026/03/26 12:07:21 | 0030: 20 99 80 92 57 52 D6 EA 3E 60 54 64 94 CB D7 A9 ...WR..>`Td....2026/03/26 12:07:21 | 0040: 3C 2026/03/26 12:07:21 | }2026/03/26 12:07:21 | },2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | }2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | }2026/03/26 12:07:21 | ) 2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.761 CET|ServerHello.java:892|Consuming ServerHello handshake message (2026/03/26 12:07:21 | "ServerHello": {2026/03/26 12:07:21 | "server version" : "TLSv1.2",2026/03/26 12:07:21 | "random" : "BC615AD793DE40BE91C165F4B23418C23D99B6B9FCDC82F63EBB75D0EFBD59EF",2026/03/26 12:07:21 | "session id" : "376B723BDEE3D12B04DB1B7611CFB41054C29BA177EC1029CD3977DE71F52789",2026/03/26 12:07:21 | "cipher suite" : "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256(0xC02F)",2026/03/26 12:07:21 | "compression methods" : "00",2026/03/26 12:07:21 | "extensions" : [2026/03/26 12:07:21 | "renegotiation_info (65,281)": {2026/03/26 12:07:21 | "renegotiated connection": [<no renegotiated connection>]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "server_name (0)": {2026/03/26 12:07:21 | <empty extension_data field>2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "ec_point_formats (11)": {2026/03/26 12:07:21 | "formats": [uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "extended_master_secret (23)": {2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | }2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | }2026/03/26 12:07:21 | )2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.761 CET|SSLExtensions.java:185|Ignore unavailable extension: supported_versions2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.761 CET|ServerHello.java:988|Negotiated protocol version: TLSv1.22026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.761 CET|SSLExtensions.java:204|Consumed extension: renegotiation_info2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:204|Consumed extension: server_name2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:185|Ignore unavailable extension: max_fragment_length2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:185|Ignore unavailable extension: status_request2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:204|Consumed extension: ec_point_formats2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:185|Ignore unavailable extension: status_request_v22026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:204|Consumed extension: extended_master_secret2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:185|Ignore unavailable extension: session_ticket2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:175|Ignore unsupported extension: supported_versions2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:175|Ignore unsupported extension: key_share2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:204|Consumed extension: renegotiation_info2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:175|Ignore unsupported extension: pre_shared_key2026/03/26 12:07:21 | javax.net.ssl|WARNING|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:227|Ignore impact of unsupported extension: server_name2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:219|Ignore unavailable extension: max_fragment_length2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:219|Ignore unavailable extension: status_request2026/03/26 12:07:21 | javax.net.ssl|WARNING|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:227|Ignore impact of unsupported extension: ec_point_formats2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:219|Ignore unavailable extension: application_layer_protocol_negotiation2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:219|Ignore unavailable extension: status_request_v22026/03/26 12:07:21 | javax.net.ssl|WARNING|D3|StartupSequencer|2026-03-26 12:07:21.762 CET|SSLExtensions.java:227|Ignore impact of unsupported extension: extended_master_secret2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.763 CET|SSLExtensions.java:219|Ignore unavailable extension: session_ticket2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.763 CET|SSLExtensions.java:219|Ignore unavailable extension: supported_versions2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.763 CET|SSLExtensions.java:219|Ignore unavailable extension: key_share2026/03/26 12:07:21 | javax.net.ssl|WARNING|D3|StartupSequencer|2026-03-26 12:07:21.763 CET|SSLExtensions.java:227|Ignore impact of unsupported extension: renegotiation_info2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.763 CET|SSLExtensions.java:219|Ignore unavailable extension: pre_shared_key 2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.775 CET|CertificateMessage.java:360|Consuming server Certificate handshake message (2026/03/26 12:07:21 | "Certificates": [2026/03/26 12:07:21 | "certificate" : {2026/03/26 12:07:21 | "version" : "v3",2026/03/26 12:07:21 | "serial number" : "04:0a:25:af:be:4e:40:6a:4b:f3:cc:55:00:f8:cf:69",2026/03/26 12:07:21 | "signature algorithm": "SHA256withRSA",2026/03/26 12:07:21 | "issuer" : "CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US",2026/03/26 12:07:21 | "not before" : "2025-07-17 02:00:00.000 CEST",2026/03/26 12:07:21 | "not after" : "2026-04-30 01:59:59.000 CEST",2026/03/26 12:07:21 | "subject" : "CN=*.service-now.com, O="ServiceNow, Inc.", L=San Diego, ST=California, C=US",2026/03/26 12:07:21 | "subject public key" : "RSA",2026/03/26 12:07:21 | "extensions" : [2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 1.3.6.1.4.1.11129.2.4.2 Criticality=false2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false2026/03/26 12:07:21 | AuthorityInfoAccess [2026/03/26 12:07:21 | [2026/03/26 12:07:21 | accessMethod: ocsp2026/03/26 12:07:21 | accessLocation: URIName: http://ocsp.digicert.com2026/03/26 12:07:21 | , 2026/03/26 12:07:21 | accessMethod: caIssuers2026/03/26 12:07:21 | accessLocation: URIName: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.35 Criticality=false2026/03/26 12:07:21 | AuthorityKeyIdentifier [2026/03/26 12:07:21 | KeyIdentifier [2026/03/26 12:07:21 | 0000: 74 85 80 C0 66 C7 DF 37 DE CF BD 29 37 AA 03 1D t...f..7...)7...2026/03/26 12:07:21 | 0010: BE ED CD 17 ....2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.19 Criticality=true2026/03/26 12:07:21 | BasicConstraints:[2026/03/26 12:07:21 | CA:false2026/03/26 12:07:21 | PathLen: undefined2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.31 Criticality=false2026/03/26 12:07:21 | CRLDistributionPoints [2026/03/26 12:07:21 | [DistributionPoint:2026/03/26 12:07:21 | [URIName: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl]2026/03/26 12:07:21 | , DistributionPoint:2026/03/26 12:07:21 | [URIName: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl]2026/03/26 12:07:21 | ]]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.32 Criticality=false2026/03/26 12:07:21 | CertificatePolicies [2026/03/26 12:07:21 | [CertificatePolicyId: [2.23.140.1.2.2]2026/03/26 12:07:21 | [PolicyQualifierInfo: [2026/03/26 12:07:21 | qualifierID: 1.3.6.1.5.5.7.2.12026/03/26 12:07:21 | qualifier: 0000: 16 1B 68 74 74 70 3A 2F 2F 77 77 77 2E 64 69 67 ..http://www.dig2026/03/26 12:07:21 | 0010: 69 63 65 72 74 2E 63 6F 6D 2F 43 50 53 icert.com/CPS2026/03/26 12:07:21 | 2026/03/26 12:07:21 | ]] ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.37 Criticality=false2026/03/26 12:07:21 | ExtendedKeyUsages [2026/03/26 12:07:21 | serverAuth2026/03/26 12:07:21 | clientAuth2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.15 Criticality=true2026/03/26 12:07:21 | KeyUsage [2026/03/26 12:07:21 | DigitalSignature2026/03/26 12:07:21 | Key_Encipherment2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.17 Criticality=false2026/03/26 12:07:21 | SubjectAlternativeName [2026/03/26 12:07:21 | DNSName: *.service-now.com2026/03/26 12:07:21 | DNSName: service-now.com2026/03/26 12:07:21 | DNSName: *.static.service-now.com2026/03/26 12:07:21 | DNSName: static.service-now.com2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.14 Criticality=false2026/03/26 12:07:21 | SubjectKeyIdentifier [2026/03/26 12:07:21 | KeyIdentifier [2026/03/26 12:07:21 | 0000: 1A 58 70 23 E6 29 0A A1 82 2C B5 CE 1D E6 7E B7 .Xp#.)...,......2026/03/26 12:07:21 | 0010: 43 AB 9A EF C...2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | }2026/03/26 12:07:21 | ]},2026/03/26 12:07:21 | "certificate" : {2026/03/26 12:07:21 | "version" : "v3",2026/03/26 12:07:21 | "serial number" : "0c:f5:bd:06:2b:56:02:f4:7a:b8:50:2c:23:cc:f0:66",2026/03/26 12:07:21 | "signature algorithm": "SHA256withRSA",2026/03/26 12:07:21 | "issuer" : "CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US",2026/03/26 12:07:21 | "not before" : "2021-03-30 02:00:00.000 CEST",2026/03/26 12:07:21 | "not after" : "2031-03-30 24:59:59.000 CET",2026/03/26 12:07:21 | "subject" : "CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US",2026/03/26 12:07:21 | "subject public key" : "RSA",2026/03/26 12:07:21 | "extensions" : [2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false2026/03/26 12:07:21 | AuthorityInfoAccess [2026/03/26 12:07:21 | [2026/03/26 12:07:21 | accessMethod: ocsp2026/03/26 12:07:21 | accessLocation: URIName: http://ocsp.digicert.com2026/03/26 12:07:21 | , 2026/03/26 12:07:21 | accessMethod: caIssuers2026/03/26 12:07:21 | accessLocation: URIName: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.35 Criticality=false2026/03/26 12:07:21 | AuthorityKeyIdentifier [2026/03/26 12:07:21 | KeyIdentifier [2026/03/26 12:07:21 | 0000: 4E 22 54 20 18 95 E6 E3 6E E6 0F FA FA B9 12 ED N"T ....n.......2026/03/26 12:07:21 | 0010: 06 17 8F 39 ...92026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.19 Criticality=true2026/03/26 12:07:21 | BasicConstraints:[2026/03/26 12:07:21 | CA:true2026/03/26 12:07:21 | PathLen:02026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.31 Criticality=false2026/03/26 12:07:21 | CRLDistributionPoints [2026/03/26 12:07:21 | [DistributionPoint:2026/03/26 12:07:21 | [URIName: http://crl3.digicert.com/DigiCertGlobalRootG2.crl]2026/03/26 12:07:21 | ]]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.32 Criticality=false2026/03/26 12:07:21 | CertificatePolicies [2026/03/26 12:07:21 | [CertificatePolicyId: [2.16.840.1.114412.2.1]2026/03/26 12:07:21 | [] ]2026/03/26 12:07:21 | [CertificatePolicyId: [2.23.140.1.1]2026/03/26 12:07:21 | [] ]2026/03/26 12:07:21 | [CertificatePolicyId: [2.23.140.1.2.1]2026/03/26 12:07:21 | [] ]2026/03/26 12:07:21 | [CertificatePolicyId: [2.23.140.1.2.2]2026/03/26 12:07:21 | [] ]2026/03/26 12:07:21 | [CertificatePolicyId: [2.23.140.1.2.3]2026/03/26 12:07:21 | [] ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.37 Criticality=false2026/03/26 12:07:21 | ExtendedKeyUsages [2026/03/26 12:07:21 | serverAuth2026/03/26 12:07:21 | clientAuth2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.15 Criticality=true2026/03/26 12:07:21 | KeyUsage [2026/03/26 12:07:21 | DigitalSignature2026/03/26 12:07:21 | Key_CertSign2026/03/26 12:07:21 | Crl_Sign2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | },2026/03/26 12:07:21 | {2026/03/26 12:07:21 | ObjectId: 2.5.29.14 Criticality=false2026/03/26 12:07:21 | SubjectKeyIdentifier [2026/03/26 12:07:21 | KeyIdentifier [2026/03/26 12:07:21 | 0000: 74 85 80 C0 66 C7 DF 37 DE CF BD 29 37 AA 03 1D t...f..7...)7...2026/03/26 12:07:21 | 0010: BE ED CD 17 ....2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | }2026/03/26 12:07:21 | ]}2026/03/26 12:07:21 | ]2026/03/26 12:07:21 | )2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.790 CET|ECDHServerKeyExchange.java:526|Consuming ECDH ServerKeyExchange handshake message (2026/03/26 12:07:21 | "ECDH ServerKeyExchange": {2026/03/26 12:07:21 | "parameters": {2026/03/26 12:07:21 | "named group": "x25519"2026/03/26 12:07:21 | "ecdh public": {2026/03/26 12:07:21 | 0000: 6D E6 B4 32 2B CD 51 56 83 42 C3 3C 25 E4 05 10 m..2+.QV.B.<%...2026/03/26 12:07:21 | 0010: 6F 8A 90 20 40 87 4B 19 C5 12 69 76 63 F8 25 37 o.. @.K...ivc.%72026/03/26 12:07:21 | },2026/03/26 12:07:21 | },2026/03/26 12:07:21 | "digital signature": {2026/03/26 12:07:21 | "signature algorithm": "rsa_pss_rsae_sha256"2026/03/26 12:07:21 | "signature": {2026/03/26 12:07:21 | 0000: 38 78 16 6F DC 32 9C DC C6 C8 6B 07 2E 40 25 BB 8x.o.2....k..@%.2026/03/26 12:07:21 | 0010: A8 78 7D 24 5D C1 36 F4 79 06 80 22 48 18 9A BA .x.$].6.y.."H...2026/03/26 12:07:21 | 0020: 9D 67 94 01 21 7D D0 DD 5C AC 0F DE DE 04 22 3A .g..!...\.....":2026/03/26 12:07:21 | 0030: EC 48 B4 23 C1 A1 A8 1B 0D 2E 45 9C E7 BF E0 5C .H.#......E....\2026/03/26 12:07:21 | 0040: 0C C4 D0 D2 0E 64 3E 3F DB 28 28 14 75 D7 25 5E .....d>?.((.u.%^2026/03/26 12:07:21 | 0050: 30 76 1E 97 87 13 9F 82 F0 D3 07 B2 50 A8 ED 92 0v..........P...2026/03/26 12:07:21 | 0060: B7 F9 D1 08 F4 E2 C3 D9 AE 09 B8 CD EB F0 B8 BC ................2026/03/26 12:07:21 | 0070: 18 8E 1A 3D 63 9C 7F DA 51 FE DD C2 D8 67 67 DB ...=c...Q....gg.2026/03/26 12:07:21 | 0080: F7 87 72 A5 19 B4 99 73 58 78 C8 A4 72 61 FF 1E ..r....sXx..ra..2026/03/26 12:07:21 | 0090: 70 9D FA B3 AE AB FB 8A DE F0 30 59 8E 6B B7 13 p.........0Y.k..2026/03/26 12:07:21 | 00A0: F5 2E DE F3 4C 80 E0 07 81 28 01 DF A2 E0 77 49 ....L....(....wI2026/03/26 12:07:21 | 00B0: B0 36 16 6F 13 E7 83 B3 1B 90 CE D1 F8 51 85 93 .6.o.........Q..2026/03/26 12:07:21 | 00C0: 10 03 BE AC CC F2 CF D4 47 00 4A EE A3 13 71 E3 ........G.J...q.2026/03/26 12:07:21 | 00D0: EB B5 63 92 1A C4 3A E1 AF 0C 69 42 AA 79 C0 A1 ..c...:...iB.y..2026/03/26 12:07:21 | 00E0: D8 89 D4 15 F0 EF 60 42 12 26 8C 68 0F 83 D9 8C ......`B.&.h....2026/03/26 12:07:21 | 00F0: A4 A9 A9 40 A8 4F 1D 0A EE AD EE BB 59 58 78 D5 ...@.O......YXx.2026/03/26 12:07:21 | },2026/03/26 12:07:21 | }2026/03/26 12:07:21 | }2026/03/26 12:07:21 | )2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.790 CET|ServerHelloDone.java:151|Consuming ServerHelloDone handshake message (2026/03/26 12:07:21 | <empty>2026/03/26 12:07:21 | )2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.793 CET|ECDHClientKeyExchange.java:403|Produced ECDHE ClientKeyExchange handshake message (2026/03/26 12:07:21 | "ECDH ClientKeyExchange": {2026/03/26 12:07:21 | "ecdh public": {2026/03/26 12:07:21 | 0000: 1A 98 09 19 8E 02 F0 74 69 AF B0 4A 8D 59 5D 19 .......ti..J.Y].2026/03/26 12:07:21 | 0010: 93 CE 8A 87 A9 43 BE 9A F1 D9 C8 8D C5 D6 B3 59 .....C.........Y2026/03/26 12:07:21 | },2026/03/26 12:07:21 | }2026/03/26 12:07:21 | )2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.799 CET|ChangeCipherSpec.java:114|Produced ChangeCipherSpec message2026/03/26 12:07:21 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.799 CET|Finished.java:396|Produced client Finished handshake message (2026/03/26 12:07:21 | "Finished": {2026/03/26 12:07:21 | "verify data": {2026/03/26 12:07:21 | 0000: DC B0 2C 47 95 02 00 15 C7 1F EF 01 2026/03/26 12:07:21 | }2026/03/26 12:07:21 | }2026/03/26 12:07:21 | )2026/03/26 12:07:22 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.995 CET|ChangeCipherSpec.java:148|Consuming ChangeCipherSpec message2026/03/26 12:07:22 | javax.net.ssl|DEBUG|D3|StartupSequencer|2026-03-26 12:07:21.997 CET|Finished.java:548|Consuming server Finished handshake message (2026/03/26 12:07:22 | "Finished": {2026/03/26 12:07:22 | "verify data": {2026/03/26 12:07:22 | 0000: 8C 78 1E B3 6B 39 F1 89 3E 56 35 77 2026/03/26 12:07:22 | }2026/03/26 12:07:22 | }2026/03/26 12:07:22 | ) Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } XXX