We have a ZFS 7sp1 distributor sending to multiple ZFS 7sp1 subscribers and
a handful of NBO 2.0 sites.

From time to time the NBO sites drop off with this error for no apparent
reason, restarting the service on these NBO boxes instantly fixes the
problem with no need for new certificates or anything?

Any idea why this happens?