Re: LDAP Import Certificate - Wrong Cert

[Jason Rivard]

Are you using an older version of PWM?   This setting was added some time ago:

https://www.pwm-project.org/pwm/public/reference/settings.jsp#setting_key_security.certificate.validationMode

Or perhaps you have changed this to the non-default value?  This will cause the CA to be added instead of the whole cert chain to handle the madness that happens in AD as you describe.