SBC TLS Certificate Validation Failure on BYOC Trunks

Trying to understand why our secondary BYOC trunks in Singapore are dropping registrations with a 401 Unauthorized error after the recent SBC firmware update. The primary trunks remain stable, but the failover logic is not triggering as expected during load testing.

The SIP logs indicate a TLS handshake failure specifically related to certificate chain validation. We have verified the CA bundle is current, yet the SBC rejects the new certificates provided by the carrier. Has anyone encountered similar compliance checks blocking registration?