https://domainbgr.blogspot.com/2022/11/domain-controller-ldap-server-signing.html