When trying to connect or configure vSphere replication, there are errors similar to "unable to get local issuer certificate". This happens even after rotating certificates.
In Site Recovery in vSphere UI, you see error "The NTP service is not running in the vSphere Replication appliance"
Replication Time Synchronization mode is set to host.
Set Time synchronization mode in Time settings on Replicator UI to "NTP", and use same NTP server IP that is being used by vCenter.