Certificate Connector can't enable. Error 1600 after Azure Login

I'm pulling my hair out diagnosing an issue enabling the InTune certificate connector. All the checks pass but when I sign in with Global admin, it give me error 16000. The event log has a variety of errors relating to PFX create and etc.