How To Set Up Web Synchronisation With IIS 7.5
The answer at this point appears to be quite simple. I was using a different domain account to run the subscription agent. I had to log into my machine with that account and install the security certificate.