I just ran into this issue and it was impacting a codec's SIP registration. The only way I could clear the certificate error, after exhausting everything mentioned in this thread, was removing the device including the workspace from Cisco Control Hub...