Seeing your messages and responses, I change the provisioning settings for the 3CX client and told it to use TCP for SIP and Normal for RTP instead of TLS and Allow Secure and it connects to the PBX just fine now after resending the provisioning file.
So something broke TLS and SRTP support for...