SIM 7.2 to c7000 enclosure no SSO

[Remediator]

Attempt to SSO to c7000 onboard administrator will result in failure:

An HP SIM Single Sign-On (SSO) was attempted but failed because
the SSO certificate on this Onboard Administrator has expired.

SIM certificate is valid from August 19, 2013 11:12:21 AM MSK to May 23, 2015 4:00:10 PM MSK

OA certificate is valid from 2013-08-19T12:00:34Z to 2015-05-23T12:00:10Z

OA is set to "trust by certificate" in HP SIM integration

SIM cert was imported into OA's HP SIM integration "certificate upload" using copy-paste of base64 text.

OA f/w is 3.71.

Using Firefox. Cache is NOT USED, i.e. equals zero MB.

Time on OA is synchronized with NTP server.

SIM server syncs its time with the same NTP server, i.e. time on both is equal down to the millisecond.

OA's System Log shows entries like:

Aug 20 09:24:55  OA: Authentication failure for user HPSIM domain\user from 172.16.63.189

each time I try to SSO to OA from HP SIM.

Any ideas on what's wrong?