How to retrieve an LDAP server's public cert

It's easy with openssl...

openssl s_client -connect <server>:636

...then copy everything between

-----BEGIN CERTIFICATE-----

and

-----END CERTIFICATE-----

(including the delimiters) and paste into a text file.