I had several issues with exchange sync errors with my company. I finally figured it out myself using this information. If this has been covered, my apologies but I wanted to get this out anyway. Essentially just installing the root certificate wasn't enough for me. I ended up installing
certificates to the intermediate level as well and finally starting connecting properly. It has worked flawlessly for months now. Here is the article on how to get
certificates and install them. the key is to grab all the
certificates meaning grab not just the root level cert but the ones above it as well (you will see this after reading the article). they will install to the intermediate level. good luck.
this allowed me to install two more certificates to the intermediate level rather than just the root level.
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/