APM profile with OCSP Authoring and Clientless mode configured, but need to reload page

what causes the 404? is the backend server expecting something that isn't send the first time?

also how do you request the certificate, if it is needed you could also do it via the ssl client profile and perhaps inspect it in the apm policy.