Symptoms
The second renewal of OpenSRS SSL certificate fails:
Certificate renewal operation has failed. Certificate status not changed.
Full Comment: The specified product is not in a state to be renewed
Cause
On the first renewal the new certificate had been issued, with new ProductID, but the value had not been updated in PBA. On the second renewal an attempt to renew an old, initial ProductID was made, which caused the failure. The issue is a bug with id #PBA-57485 ("OpenSRS: Second renewal of SSL Certificate fails because Product ID was not updated").
Resolution
The bug will be fixed in one of the next PBA updates.
Until that it is required to update a value manually:
update "OpenSRSCert" set "ProductID" = [new_id] where "ProductID" = [old_id];