Either Exchange can't find the default TLS certificate attribute for server {0} in Active Directory, or the attribute is ...

Either Exchange can't find the default TLS certificate attribute for server {0} in Active Directory, or the attribute is corrupted. Run either the Enable-ExchangeCertificate or New-ExchangeCertificate cmdlets on this server, and then try to run New-EdgeSyncSubscription again.