This looks to have resolved itself overnight. I don’t really understand what went on, but it might have been a CDN issue or something as I could pull the correct cert from one device and on another it would pull the 2023 cert rather than the older one. Most odd. Glitch in a Matrix?