A new certificate chain validates while one appliance still pins the previous intermediate or key hash and rejects the same service after a maintenance template change

The chain is globally right and one trust consumer is still anchored to the past. The path looked healthy before the template changed, but one inherited assumption no longer matches the live environment.