Using PowerShell check if the Trusted root certification container has no mess placed certificates, usually Admins install the intermediate certificate in the Trusted root certificate causing this problems

:\>Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Format-List * | Out-File “c:\wrong_certificate.txt”

Exam the content of the text file where you should find the name of the certificate(s) causing the problem in this file locate it and delete it or move it to the correct container, restart your server and all should be fine.

http://lyncdude.com/2015/12/05/ls-user-services-invalid-incoming-https-certificate/index.html