I had this issue as well with BitBucket and some other sites I was on code 8.0.7 and upgraded to 8.0.16 and the issue was resolved. I got communication from a Sr DE that there is a refreash feature for the certificate trust list CTL of root CAs in the 8.1 code https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/networking-features/refresh-of-default-trusted-cas# -Manny
... View more