Use openssl to export the LDAP server's certificate, by running the following commands:

echo | openssl s_client -connect <LDAP FQDN>:636 -showcerts

echo | openssl s_client -connect ldap.example.com:636 -showcerts

Example:

The following command displays the LDAP servers certificate:

echo | openssl s_client -connect

asewinsrvdc.aseteam.ch:636 -showcerts

• When the certificate is displayed, copy the certificate along with the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines to a file. For example: ldap-server.crt.