OCSP stapling is healthy at the edge, but the origin health checker trusts only the leaf and marks the backend down on the renewed chain

Customers see a good certificate path, yet the internal monitor fails because its trust assumption is narrower.