Hi,
Thanks for the response.
To be clear I don't think this is really a problem with PMG, I think it's a few sending servers that don't handle the expired original DST Root CA X3 certificate well. However, this appears to be very similar to what we had with iPhones connecting to Exchange...