Recently had to diagnose an issue with a PKCS Certificate not deploying a users machines via the Intune Certificate Connector
The Certificate was showing as Issueued but was nowhere to be seen on the Laptop
To force a resync with the Intune Connector you will need to Clone the existing Device Config Configuration and redeploy it to the same workstation again ( New Device Config Forces a Resync and new Cert from the CA)