Undocumented; problems usually relate to server ldap.conf requiring certificates (TLS_REQCERT = demand) or the TLS_CACERT path not being set to point to the proper local certificates location. Fiddle with those, reload web server and you should be set.