It might have been an obvious lack of a name match, such as having a middle initial on the account but not the cert because the cert came from a flight that was booked without the middle initial.