In the documentation about AD publisher: https://download.primekey.se/docs/EJBCA-Enterprise/latest/Active_Directory_Publisher.html when TLS configuration is described the document only observes checking the correct port but no further configuration.

Extra steps are needed like the ones decribed under section SSL configuration for OpenLDAP: https://download.primekey.se/docs/EJBCA-Enterprise/latest/LDAP_Publisher_LDAP_Search_Publisher.html#src-16230073_safe-id-aWQtLkxEQVBQdWJsaXNoZXIvTERBUFNlYXJjaFB1Ymxpc2hlcnY2LjEzLjAtQ29uZmlndXJlU1NMQ29uZmlndXJlX1NTTA

So either a link or the required steps need to be added to the AD documentation.