A new certificate chain validates while one appliance still pins the previous intermediate or key hash and rejects the same service during a rollback rehearsal

The chain is globally right and one trust consumer is still anchored to the past. The steady path hides the problem until the system is asked to move backward through the dependency chain.