but it seems that I'm getting the clock skew error for the directory service every time I try to resubmit the cert renewal because the rolling back of the date/time to the local server is affecting the clock for the directory service. I think that's causing my renewals to fail.