Microsoft Exchange 2013 iApp - Can't login to OWA or ECP if more than one server is active in pool

[PS] C:\Windows\system32>Get-ExchangeCertificate -Server Server1 | fl

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule} CertificateDomains : {outlookweb.domain.com, autodiscover.domain.com, outlookwebdr.domain.com} HasPrivateKey : True IsSelfSigned : False Issuer : CN=Thawte SSL CA, O="Thawte, Inc.", C=US NotAfter : 7/26/2016 7:59:59 PM NotBefore : 7/2/2014 8:00:00 PM PublicKeySize : 2048 RootCAType : ThirdParty SerialNumber : 78673A5B9DB7CFBED7D707C2243416BC Services : IIS Status : Valid Subject : CN=outlookweb.domain.com, OU=IT, O=MyCompany, L=SomeCity, S=SomeState, C=US Thumbprint : 38576C408C3BD90DADDBE9F91E5D30A4E7FBDDEC

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule} CertificateDomains : {} HasPrivateKey : True IsSelfSigned : True Issuer : CN=Microsoft Exchange Server Auth Certificate NotAfter : 6/4/2019 10:41:12 AM NotBefore : 6/30/2014 10:41:12 AM PublicKeySize : 2048 RootCAType : None SerialNumber : 1287947A3004A78541EEBC2BBFDF8D96 Services : SMTP Status : Valid Subject : CN=Microsoft Exchange Server Auth Certificate Thumbprint : 7560532AA7C256D489FE55EF80A73CD6FC4B5DF0

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule} CertificateDomains : {Server1, Server1.domain.com} HasPrivateKey : True IsSelfSigned : True Issuer : CN=Server1 NotAfter : 6/30/2019 10:40:02 AM NotBefore : 6/30/2014 10:40:02 AM PublicKeySize : 2048 RootCAType : Registry SerialNumber : 1BBEF530CEE01FA14EC5AD318890B742 Services : IMAP, POP, SMTP Status : Valid Subject : CN=Server1 Thumbprint : C61EC2DB867020FF4DA1286127A25E51893E6587

AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule, System.Security.AccessControl.CryptoKeyAccessRule} CertificateDomains : {WMSvc-Server1} HasPrivateKey : True IsSelfSigned : True Issuer : CN=WMSvc-Server1 NotAfter : 6/27/2024 10:10:52 AM NotBefore : 6/30/2014 10:10:52 AM PublicKeySize : 2048 RootCAType : Registry SerialNumber : 2D0711091356248F4206F7BDCE8B8473 Services : None Status : Valid Subject : CN=WMSvc-Server1 Thumbprint : BB4AE0324E0BF897094B84287C038BE2C7A67787