Failed to renew device certificate

[kbe]

Hi

the device certificate is going to expire end of march.

My PA trys to renew it and comes up with the following error:

Failed to renew device certificate.Failed to send request to CSP server.Error: No OCSP response received(dest => 35.238.43.180)

I have no telemetry enabled.

Just activated the certificate with OTP on 2020/12/29 after upgrading to PanOS 9.1.7.

Now it´s the first try of my PA to renew it.

The only thing i found relates to PanOS 9.1.8 wich seems to fix another error with device certificate:

Fixed an issue where the firewall returned the following error message when attempting to request a device certificate using a one-time password (OTP): 

invalid ocsp response sig-alg

Any ideas where to look for?

TIA

[JoeCheng]

PA-5450 PAN-OS 10.2.3-h4 憑證已經過期 無法自動更新
我嘗試你的Cli，它可以運作，憑證更新成功了~ Thank you