The following error will be observed after upgrading to 8.22.3 or later versions. This is due to a missing root cert in the x509 certificate chain. If the LDAP server is setup with a SAN on the LDAP cert, the root cert will now be required. Below is the error when testing the TLS connection:
Failed sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Ensure that the remote server's certificate has been saved to the correct location on the Security Manager server and the correct TLS port is specified.