- if no ldap-server.crt get's provided, but is configured in idp-config, link to system ca-certificates or curl current https://curl.se/ca/cacert.pem from mozilla foundation