Hi All
Thanks for pointing in the right direction. In the end the guys opened a call with MarketPlace. Last update I heard is they might have to patch.
They were happy to hear that expired certificates should be automatically removed next time the user tries to authenticate.
Regards
Colleen