--- /usr/sbin/univention-adsearch       2020-06-27 13:37:58.000000000 +0200
+++ /tmp/univention-adsearch    2020-07-15 16:49:00.543603839 +0200
@@ -122,7 +122,7 @@
 
 certificate_chain_filename = '/var/cache/univention-ad-connector/CAcert-%s.pem' % CONFIGBASENAME
 start_tls = 2 if configRegistry.is_true('%s/ad/ldap/ssl' % CONFIGBASENAME, True) else 0
-if start_tls > 0:
+if start_tls > 0 or protocol == 'ldaps':
        ad_cert_filename = configRegistry.get('%s/ad/ldap/certificate' % CONFIGBASENAME)
        if ad_cert_filename:
                if not os.path.exists(certificate_chain_filename):