Issue: When you restart the primary server a new IP address is assigned to it, this new IP address does not match the one in the SSL certificate of the secondary server.
Workaround: Restarting the secondary server would make it reissue the SSL certificate with the new IP address.