How many PSCs are in this environment?
Given it's reporting a thumbprint mis-match from the given and expected thumbprints when trying to connect to the SSO VMOMI endpoint, I suspect that you have an issue with your SSL trust anchors.
When did you replace the PSC Machine SSL certificate, and by what method did you replace it (using the certificate-manager tool, using vecs-cli, etc)?