Automating certificate management to A10 load balancer using Digicert CertCentral automation sensor - ssl

Question

Looking to see if anyone else has experience with DigiCert's automation software to help me out with a problem. Simply put, the automation sensor fails on the POST to AXAPI when attempting to update the client-ssl template. The client-ssl template is the resource that contains the instructions for handling HTTPS for a tcp/443 VIP port, which includes the references to the cert, key and chain cert (among many other things).
Digicert's own documentation is lacking aside from simply setting up the connection to the load balancer from the sensor, and I've been working with an escalation engineer for a multiple weeks now, who confessed to me that his responses are delayed because he doesn't have an A10 for replicating the problem and relies on coordination of this issue with his India-based dev team (who does have an A10. The engineer working on this and myself are located in USA, thus the delay in back and forth communications.
This seems like a simple straightforward process here, and our A10 configurations are not terribly complex.
So here is what I'm seeing from the sensor logs (minus some redactions):
`ID: 445
Address: https://10.xx.xx.xx:443/axapi/v3/slb/template/client-ssl
Http-Method: POST
Content-Type: application/json
Headers: {Authorization=[A10 6144xxxxxxx8207], Accept=[application/json], Cache-Control=[no-cache], Content-Type=[application/json]}
Payload: {"client-ssl":{"session-cache-timeout":0,"server-name-list":[],"cert":"mycert.crt","sni-bypass-enable-log":0,"enable-tls-alert-logging":0,"certificate-list":[{"cert":"test.mycert","key":"test.mycert","chain-cert":"DigiCert_SHA2_High_Assurance_Server_CA_intermediate","shared":0,"uuid":"f200f5f2-9374-11ed-9145-d99b8f82c36b","a10-url":"/axapi/v3/slb/template/client-ssl/test-mycert/certificate/test.mycert"}],"authorization":0,"local-logging":0,"disable-sslv3":1,"sni-bypass-missing-cert":0,"key":"test.mykey","session-ticket-lifetime":0,"chain-cert":"ica-test.mychaincert.crt","shared-partition-cipher-template":0,"sni-bypass-expired-cert":0,"close-notify":0,"session-ticket-disable":0,"early-data":0,"ocsp-stapling":0,"client-certificate":"Ignore","server-name-auto-map":0,"session-cache-size":0,"version":34,"renegotiation-disable":0,"name":"test.mycert","handshake-logging-enable":0,"ssl-false-start-disable":0,"direct-client-server-auth":0,"dgversion":31}}
2023-01-13 14:10:01,936 DEBUG transport.http.Headers - Accept: application/json
2023-01-13 14:10:01,936 DEBUG transport.http.Headers - Authorization: A10 6144000000150c8bc682cf4c32bd8207
2023-01-13 14:10:01,936 DEBUG transport.http.Headers - Cache-Control: no-cache
2023-01-13 14:10:01,936 DEBUG transport.http.Headers - Content-Type: application/json
2023-01-13 14:10:01,936 DEBUG transport.http.HTTPConduit - No Trust Decider for Conduit '{https://10.xx.xx.xx:443/axapi/v3/slb/template/client-ssl}WebClient.http-conduit'. An afirmative Trust Decision is assumed.
2023-01-13 14:10:01,982 DEBUG transport.http.HTTPConduit - Sending POST Message with Headers to https://10.xx.xx.xx:443/axapi/v3/slb/template/client-ssl Conduit :{https://10.xx.xx.xx:443/axapi/v3/slb/template/client-ssl}WebClient.http-conduit
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Adding interceptor org.apache.cxf.ws.policy.PolicyInInterceptor#480fe6df to phase receive
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Adding interceptor com.digicert.trustgateway.agentless.a10.service.rest.cxf.CustomLogInInterceptor#214027f8 to phase receive
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Adding interceptor org.apache.cxf.jaxrs.client.spec.ClientResponseFilterInterceptor#214cbf7e to phase pre-protocol-frontend
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Chain org.apache.cxf.phase.PhaseInterceptorChain#2f37e187 was created. Current flow:
receive [PolicyInInterceptor, CustomLogInInterceptor]
pre-protocol-frontend [ClientResponseFilterInterceptor]
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Invoking handleMessage on interceptor org.apache.cxf.ws.policy.PolicyInInterceptor#480fe6df
2023-01-13 14:10:02,390 DEBUG cxf.phase.PhaseInterceptorChain - Invoking handleMessage on interceptor com.digicert.trustgateway.agentless.a10.service.rest.cxf.CustomLogInInterceptor#214027f8
2023-01-13 14:10:02,390 INFO cxf.interceptor.LoggingInInterceptor - Inbound Message
ID: 445
Response-Code: 400
Encoding: ISO-8859-1
Content-Type: application/json
Headers: {Cache-Control=[max-age=0, no-cache, no-store, must-revalidate], connection=[close], Content-Length=[199], content-type=[application/json], Date=[Fri, 13 Jan 2023 19:10:01 GMT], Referrer-Policy=[no-referrer-when-downgrade], Server=[Apache], Strict-Transport-Security=[max-age=31536000; includeSubDomains], X-Content-Type-Options=[nosniff], X-Frame-Options=[SAMEORIGIN], X-XSS-Protection=[1; mode=block]}
Payload: {
"response": {
"status": "fail",
"err": {
"code": 67108919,
"from": "BACKEND",
"msg": "Cannot use this command while corresponding deprecated commands in use"
}
}
}
`