sorry for the late response ...
sh tasks shows as expected:
LDAP Server Listen for connect requests on TCP Port:389 SSL Port:636
ldapsearch comes not from notesclient. I'm using it from a third party linux machine.
Tom, i don't know how to add a new CA certificate to the Domino dirctory.
There is a button 'Add' but i can only puttin some text but no keyfile.