It is likely that certificate 'CN=AdsGestV1' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail.

https://support.microsoft.com/en-us/kb/889651

certutil -repairstore my "SerialNumber"