Symptoms
The CertificateDeploymentServicelet that runs on the Microsoft Exchange Service Host service doesn't distribute the Federation and the server authentication certificates in Active Directory (AD) forests, in which Exchange Server-based servers are installed in multiple AD domains.
Resolution
To fix this issue, install Cumulative Update 13 or a later cumulative update for Exchange Server 2019.