https://domainvb.blogspot.com/2023/01/domain-controller-ldap-server-signing.html