Thanks, the VCSA manages (currently!) 3 separate clusters. 2 of the clusters have the correct time, the other cluster, in the case of this query, is 2 hours out. If I set the time manually, the 2 hosts stay out by 2 hours. If I select the NTP server on site, they stay 2 hours out.
If I try reconnecting them, I get the certificate error. The VCSA is set to JHB time which is 100% correct and it works.