Well, as expected, it is syncing every record. But, this is the test system, and what the hey, it's not a bad thing to go through something like this...
Removing all certs proper and the certs listed in the authentication string/tab, then regenerating them in designer did the trick for the connections...