Who rated this post

Interesting - to clarify, did you end up rebooting the box?

You should be able to get into the CLI and remove the SSL/TLS Service Profile that's applied to the management interface - it'll then start using the built-in self-signed webgui certificate.

Since it sounds like you can get into the console, you can just run "show system info" to get the PAN-OS version and other key details.

Failing everything, if you can console in you can save a named config version, export it via SCP or TFTP, and factory reset the box (though there are various things you can try before then).