Robin my problem with the certs was sorted in the end by making the cert at work have the CA from the ISA box

But the problem I have is that it *only* works when I am connected to the works wireless (ie on the works LAN) it will not work at all via any other net connection (3g, home internet etc)