AD/Interal Hybrid issue

You have SSL enabled, which means the root/CA cert being used to sign the AD server certificate almost certainly needs to be added to Ignition's trusted certificates.