SSL needs to be sorted on destination category & resource otherwise result can be random