Share personal certificate of LDAPS server to Clients

Question

We have enabled LDAPS on the DCs and that means that each of them has it own personal certificate.
Some application owners (java untill now) request from us that pesonal certificate of the domain controller in order to embended it to their application.
I would like to ask if to give the personal certificate of a domain controller to a member server is a valid practice and if that could be mean a security issue.

Thank you

Answer 1

Hi,

Q&A currently supports the products listed in right-hand pane (more to be added later on)

You can reach the experts in the dedicated Directory Services forum over here:
https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverDS

(please don't forget to mark helpful replies as answer)

Best regards,
Leon