How to configure certificates for LDAPS

[John.Cockerham]

I am trying to integrate Jira Helpdesk running on Ubuntu with LDAPS running on Windows Server 2016.  I keep getting the following error:

Connection test failed. Response from the server:
ad.server.ca.local:636; nested exception is javax.naming.CommunicationException: ad.server.ca.local:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

It looks like a certificate problem.  Please note that I have already imported my Windows CA's public key into the java certificate store. (keytool -importcert -keystore ./jre/lib/security/cacerts -file /home/jmyuser/CA_DER.cer).  

I have read all the docs from Atlassian on this topic.  They has seem to be missing the step of generating a CSR from Jira to have signed by the Windows CA and then imported back into Jira.  They only seem to cover inporting the Windows CA Root certificate.  Am I missing something here?