LDAP with TLS does not work in 3.3

we ran several tries to setup ldaps, but failed to do this, no matter if we used the config app or if we patched the config.yaml ourself. If we setup via a ldap URL without TLS it does work fine, once we switch to ldaps it does fail with "Generic Error". The certificate gets copied to the pod but seems not to be used.