It is likely that certificate 'CN=AdsGestV1' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail.
https://support.microsoft.com/en-us/kb/889651
certutil -repairstore my "
SerialNumber
"