Wess33 if the auth certificate is valid and the private key is exportable, the script will do an export and import of it to the server where it's missing.
If you're unsure whether the certificate can be exported, you can give it a try by running the script like this:
.\MonitorExchangeAuthCertificate.ps1 -ExportAuthCertificatesAsPfx
It's not required to run the HCW in this export/import scenario since we're not creating a new auth certificate. Run the script like this (make sure that you use the latest version of the script) to perform the appropriate action:
.\MonitorExchangeAuthCertificate.ps1 -ValidateAndRenewAuthCertificate $true -IgnoreHybridConfig $true [-Confirm:$false < this parameter is optional see: How To Run ]