@ Mauro - thanks for mentioning that there is no more minint-xxxx naming convention, I was wondering why it wasn't showing up like like 7.1.
I found that the Extract SSL task failed to run on the site server. I had to manually run it. My root cause is something with Task server/IIS.
FYI - this is a heavly locked down environment (no SYMC support) only one knows what hardening was placed on the server, permissions, DCOM, and IIS.
I'm marking the thread as closed.
UPDATE:
The SSL cert only had the shortname in the Subject Alternative Name field. It was missing the FQDN.