So it was time to investigate. On the MS and RMS nothing strange was shown. The OpsMgr log of the CA showed this error however: CARoleDiscovery.vbs : Unable to determine the Common Name of the CA hosted by xxxxxxxxxxxxxx. Cause: CCertRequest: :GetCAProperty: The permissions on this certification authority do not allow the current user to enroll for certificates. 0x80094011
So the script couldn’t run.