so on the control-m side you imported the bladelogic server's cert or the ca chain that signed the cert into the keystore control-m uses ? the error seems to be a pki validation error.
What is the authentication profile type that you used for Control-M. As Bill Robinson mentioned, the error seem like PKI authentication related. Worth checking the profile auth type selected. I would try an SRP to start with... I will be doing this very soon and keep you posted.