Smart Proxy Feature Puppet Autosign and DNS do not work

Problem:
When I deploy a VM, it does not set a DNS A-Record in our Windows DNS Server. I use dns_nsupdate as provider and the configuration has not changed. Also, the newly provisioned host does not get a puppet certificate. While provisioning, the host is in “autosign” list but then wanders to pending list in smart proxy and I have to sign the host manually.

Expected outcome:
valid DNS entry and autosigned host at puppet CA

Foreman and Proxy versions:
foreman 1.23 with katello 3.13

When i run the nsupdate utility from command line manually, it does set a DNS A-Record so I am certain it is not a configuration error.
In smart-proxy logs there are no shown errors.