Symptom:
documentation that describes setting up conductor with ucm does not include the information below --

setting up conductor to cucm using tls requires that the conductor server certificate include X509 Extended Key attributes

*  serverAuth (1.3.6.1.5.5.7.3.1) -- TLS Web server authentication
*  clientAuth (1.3.6.1.5.5.7.3.2) -- TLS Web client authentication
*  ipsecEndSystem (1.3.6.1.5.5.7.3.5) -- IP security end system

Conditions:
using tls between cucm and conductor