endpoint out of sync

dear fellas,

anyone of you experienced here after you revoked the cert of a certain endpoint from the EMS Server side, that particular endpoint shows "out of sync status". Please see attached image.

Now, to test its connectivity, I tried to do some changes to that rule and that endpoint was able to inherit the changes. Yet still, the status still remains.

Addl question. I deleted my old ZTTR in EMS Server. Yet in the FortiGate, deleted tags are still present in the ZTNA Tags. Is there a way to delete those unused tags thru cli?

Thank you in advance.