Fully switched 2 years ago from ADDS, automated the ldaps certs with letsencrypt dns01 challenge and haven't touched it since, it just works.