Hi Randy,
According to the information provided in your post, the issue could occur if the SIP domain name of the user doesn't match the domain name in the certificate of the Lync Web Service and Exchange Web Service.
Currently we don’t have a solution for the issue. To work around the issue, I suggest you use the GPO method mentioned in the workaround part of: http://support.microsoft.com/en-us/kb/2833618 to modify the trust domain list, your understanding is appreciated.