QQ - When using a SSL_tcp Vserver on 636 for ldaps it needs a certificate bound to the SSL_tcp vserver. Every guide I seen people use a wildcard such as *.corp.com bound to the SSL_tcp vserver but can I use a cert with something like ldaps.corp.com as common name ? DNS A record would then point that name to the new SSL_tcp VIP

That's what I do for ldaps using one FQDN, no issue.

cool cheers anything else specific you got to do for SSL_TCP ? what you got set on the LDAP Auth server "security type" SSL or TLs ? validate server cert ticked/unticked ?

Good stuff 👍