Hi
We have found our Problem:
On the DC we seen following Error:
On the DCs more than one certificate is installed. I installed the second certificate on the svm (security certificate install -type server-ca -vserver svm1).
After that i have reenabled the Option "use-start-tls-for-ad-ldap" and voila it worked again.
regards
Thomas