its possible that initial sync ignores certificate as normally your exchange website has to send that to you on first pass. Subsequent passes it would expect the cert to be in place. It would do no harm to install the cert