If you have support you should really open a SR, there is alot that could be going on here. It could be more certs that the checksts script doesn't check
