Certificate installed (issued 21 July, so they already had one, probably missed installing on the sub-domain).

Yup, looks like it's all sorted now - sweet.  And yeah - wildcard cert so as above (i.e. was not a failure renewing the cert - just in installing it to one of their servers\sub-domains I guess)