Can you confirm that checkhost is still returning the serial number of the old certificate? If you’re using some kind of loadbalancing setup or a CDN make sure that every node is using the new certificate.
Otherwise, could you provide the hostnames you’re trying so I can verify?