Validating the LDAPS configuration

After completing the LDAPS TLS configuration, open a command shell in any machine with OpenSSL installed and run the following command for each Domain Controller.

Where <DOMAIN-FQDN> is the Fully Qualified Domain Name of the Domain Controller. For example:

If LDAPS is configured properly, this command will display the LDAPS certificate for the selected domain controller.