In implementing OpenIDM and AD synchronization, through port 8444 two-way synchronization, at the time of validation of SSL, AD plugin plug-in error
Verify_server_certificate () CertVerifyCertificateChainPolicy error 800 b010f
Net_security_error () 800 b010f CERT_AUTHORITY_INVALID
Online query the error code, generally refers to the CN names don't match, but I set according to the document, there should be no problem