Thanks for the swift reply, much appreciated. When running security dump-trust-settings I get SecTrustSettingsCopyCertificates: No Trust Settings were found.. This machine is not managed.

I used "Erase All Content and Settings" to clean the machine, all good now. I'm afraid we'll never find out what the real issue was, but I needed this fixed urgently.