I never tried this but, if I where in your shoes, I'd pull a copy of Wireshark, instruct it to use the SSL dissector on TCP 636 and have a look at a packet dump: if you're looking at an SSL failure, ...

hoping some one has seen this issue and can lend a hand here. I've been tasked with setting up LDAP over SSL (TLS) for a Windows domain controller. This requires an SSL certificate to encrypt LDAP ...