Interesting observation:
http://joostvanlier.wordpress.com/tag/microsoft-lync-server-2013/
You better have SAN of edge pool and of each individual servers in the certificate. By default it is not proposed by wizard.
Then you can use test tool msturnping sucessfully.
Not sure about whether this creates issues for normal use, as I see that it is not really impacting federation and other traffic. Anyway, it costs nothing to add those fields in to certificate and profit from msturnping tool.
