Tag not monitored by Microsoft.
I think digicert just doesn’t offer a free est env… est only comes up on a paid one/mPKI tenant, so that link is only the base‑url map. for testing u can spin a trial tenant n enable est in the ca‑profile — any leftover ref/ghost‑bind will block est even if the setup looks right.