13Microsoft-Windows-CertificateServicesClient-CertEnrollCertificate enrollment for Local system failed to enroll for a DomainController certificate with request ID N/A from testsql.domain.local\TESTCA (The RPC server is unavailable. 0x800706ba (WIN32: 1722)).There were some bad entries from old machines in Active Directory Sites and Services. I cleaned them up following the article in the link.