Thanks for your reply. I did stop tracking and start tracking with the self sign
attribute. This did not create the certificate that matches my other servers. All it did
was change the CA to SelfSign but everything else was the same. I think that I may need to
issue a new request as it looks like the certs for the KDCs_PKINIT_Certs profile are
different from the other. I will also go to the source and see how the installer creates
these. Thanks!