Followed this:
I definitely done:
.cer file that you copied from the RD Broker
But the complain from the webpage gives the hash of the certificate from actual RD SH to which I am connecting, NOT the Broker!
And if I
Import-RDWebClientBrokerCert <rdsh.cer
then it complains about certificate from the Broker
Madness!