Could it be that happens because you also have nethserver-sssd package from the testing repo? ldapTLS and the certificate check…