X_PWA_PUSH_REJECTED
Means
the push service refused the message and will refuse it again
Typical cause
a 400, 401, 403 or 413: a VAPID key the subscription was not made with, a subject the service refuses, or a body it will not take. Logged by pushToActor and counted as refused, never retried; on a 401 or 403 the subscription is deleted — it was made with a key this server no longer signs with — and subscribeToPush replaces a browser's stale one the next time it asks
Fix
x vapid show — a 403 after a key change means every subscriber subscribes again