$ 0 0 Delete the Cert on the downstream server. Export the Cert from the upstream server and re-import it on the downstream server. Reboot the downstream server and try to synchronize again.