The account does not have permission to impersonate the requested user.
The impersonation account specified in the Exchange connection is likely incorrect. Ensure that you are using the User Principal Name (UPN) of the user and not just an email address.
Badly formatted directory string
Since certificate DN's include comma delimiters, please do not include comma's in the organization name or any other field when generating a certificate or updating the manifest.