Thanks for that Igor - I had already tried that process though I'll attempt the ssl client once I'm in at work tomorrow and see if it can provide any more diagnostic information that might help debug it. I think the issue is something to do with the fact there is the domain certificate and there is both primary and secondary intermediate certificates - so 3 in total which isn't something I've seen before.

Will see what I can turn up in the morning.

Thanks
Andrew