you’ll need the PEM formatted certificate of the certificate authority (CA) that issued your AD domain controller’s or LDAP directory server’s SSL certificate.
Frequently Asked Questions about In order to secure LDAP connections to your directory server using LDAPS or STARTTLS protocols
