We have discovered several MS patches were recently applied that appear to have caused this issue.
KB2912390 KB2909210 KB2830477
Once these were uninstalled from the cores it works on 2 of 3. We still have one that fails to provide a cert even when in direct mode.