Having been stuck on this for 2 weeks my project manager got many of my colleagues to brainstorm.

You need to import a certain Starfield certificate into your trust store.

From dev (connected over the internet) this gets imported automatically when you do a transfer.

In test (mimicking live with Direct Connect and no internet) you need to import the certificate manually.