Client requesting certificates multiple times

[Sheridan]

I've got a random issue where certain W10 clients will request a device cert from the internal CA (for vpn use, using an intune config) - every so often a random PC will request this cert 7-10 times a minute the duration it is powered on!

 

Then it stops and won't happen again, but another one will do it - there doesn't seem to be a pattern though. Of course the client ends up with 1000's of valid certs and the CA has 100s of 1000s of issued certs so something's not quite right?

 

Clients are offsite so its tricky to diagnose but I can't see a reason why they would do this?