Fresh image of 3.2 fails to get any patches (current 3.2.2), I think due to system clock not being updated automatically.
Selecting the online update shows some messages on screen including:
'ERROR: The certificate of 'raw.githubusercontent.com' is not yet activated.'
The system date is in 2019 by default - after running 'timedatectl set-timezone Europe/London', then
'timedatectl set-ntp true' to get updated internet time, can verify that time is updated with 'date', and the online patching will work again.